{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:14e14136-97f6-4e8c-9a73-f85c6a50aeb4",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-12T12:58:45Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "flora-colossus",
      "group": "",
      "version": "2.0.0",
      "description": "Walks your node_modules tree",
      "purl": "pkg:npm/flora-colossus@2.0.0",
      "bom-ref": "pkg:npm/flora-colossus@2.0.0",
      "author": "Samuel Attard",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, prepare, pretest, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "xml-test",
          "version": "",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/xml-test",
          "type": "application",
          "bom-ref": "pkg:npm/xml-test",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@cspotcode\\n@jridgewell\\n@tsconfig\\n@types\\n@ungap"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "test/fixtures/xml2js/yarn.lock\\nyarn.lock"
      }
    ]
  },
  "components": [
    {
      "group": "@cspotcode",
      "name": "source-map-support",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21c84d7fa74de2d1e8305227ffb384f0b599d7d63aabfebb0667fabe719112ff1149b0556fd2cf27111c9f0adcc17ea2c52bda886a2898052fbb8612c57ad583"
        }
      ],
      "purl": "pkg:npm/%40cspotcode/source-map-support@0.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/@cspotcode/source-map-support@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1769ac95aded69df8c7e1b79709abb2d25dc76e74a4d6095614830ea92c538e1d24ed6658fa496358029f8086ea8b9967413b65f984facb72ef1c54ff1fcb6f3"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cf4891d69a2dfde1fb94bb30e71b3d7088aa967e8d725de70740c45fda5ea1ced4cefa73ebbbae7c0320e781a05eee2b08c44911b0f47715987eb3b8956b853"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc17a5b7ab5d73c6cf800b5b72676d349962ad5a139846f97b6802f783e7930116f6323a0801d47a81bce6d8d63f95aabaa7dabe832d330886e0ff76e9928ab9"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.9",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node10",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8cdb18555c54f2fe60e3712b8dadf695a2031d77a836f144a57df738ae1dea1963a378c3842043871e5d8420933165288ec72901a8068919012b1a5d97d7f1a8"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node10@1.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node10@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node12",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72a79fb91b21d76a56c86b08a0128903d96e16ede6471080f8e459bc0e24b4b4b322e094b56571188b978a01303b9ff2c1614c67640418a5af9191b5cc33136a"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node12@1.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node12@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node14",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cac4fc9a1762c562ba1f0de2d55d80791a99e567d78351b8de6aa86253369dceb7f3c16ae63717cabe6646ca9588bc7f18961da0bd1b7d70fc9e617e667fc8a3"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node14@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node14@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node16",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8e94573eed4b4bffcf6dd998633efbc1fc3780af7afe0eae7c220cec164380bd50ba34c2579821a36e9b5d5dd47daac5fba4a7132feb3cec5b584448b674411"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node16@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node16@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "chai",
      "version": "4.3.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "842ece327b33a718593ddb97fa6fa7af1fae1682e458e322478a1afc0645dccb9211361366615f2401ea64433c31596f7c6ec1114720bedc28093c41a7a866de"
        }
      ],
      "purl": "pkg:npm/%40types/chai@4.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/@types/chai@4.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "debug",
      "version": "4.1.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f40a27533c938d75e110e6b40e7aa9cd98ba54796a28cb3081af445e3a579e7ab1c0bb5dbcf3ed94ef1ebeb2390fd4ba6ac151090eaffb0a6250a6f0faf2aaca"
        }
      ],
      "purl": "pkg:npm/%40types/debug@4.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/@types/debug@4.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "fs-extra",
      "version": "9.0.13",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c49f007efb5bb99550ccd94238735fb947e15868a7da0334b83a87287229a3566de7430dd3bb31f950db2872b71305b8677ab6e5c878f8038f6a5db22265da4"
        }
      ],
      "purl": "pkg:npm/%40types/fs-extra@9.0.13",
      "type": "library",
      "bom-ref": "pkg:npm/@types/fs-extra@9.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mocha",
      "version": "10.0.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac00d8f87b53380e7697d5595ad8107e7e29f940d53367835643194f523ab32a7460ac56d85f6ffb4a5b4592ecbec92142ffef31be997c26b2f351876f3e521e"
        }
      ],
      "purl": "pkg:npm/%40types/mocha@10.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@types/mocha@10.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "ms",
      "version": "0.7.31",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a25202b357d02e684919aa438b0c8be54222fa96db9977db46716de0c299d7f096ee8ae8459441a69855c45e4379d02beaeceb3cf08636bf47640ea5d859580"
        }
      ],
      "purl": "pkg:npm/%40types/ms@0.7.31",
      "type": "library",
      "bom-ref": "pkg:npm/@types/ms@0.7.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "13.7.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1578bd760ba8104bf1801319dd8a049a2f14eb2a940fc5ec31f5b39cc1fbc988981ee2bafbc0d6a987827e9ece61ae6215d9ab39ab1a8df182ad867f6a8748f"
        }
      ],
      "purl": "pkg:npm/%40types/node@13.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@13.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "12.20.55",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27cc4bcfbab6385ba56767321932c4d536db65c8e99e8ec568deb374936b80076b27e0d9ce1fee151e98ad36f80be9d76a4bee77c438fab6e1a085a56106d415"
        }
      ],
      "purl": "pkg:npm/%40types/node@12.20.55",
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@12.20.55",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@ungap",
      "name": "promise-all-settled",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0bfdc12f2560270a55f0d301e4f39ff62f41ba4a3f140740ad7354c431b292b26a51a2caa1c23f605a0151652ac1af67fdb625c84b036108f9a57ea52ac9bf5"
        }
      ],
      "purl": "pkg:npm/%40ungap/promise-all-settled@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@ungap/promise-all-settled@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "8.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93e8b21c4b8f812c3a49bb83a4640cfb4e874146b4e03677a3e17a092cd732fbc8e4a32f9da12a5def9855ee79e51f679fa18fb78d387e8b38c1c829c35d920c"
        }
      ],
      "purl": "pkg:npm/acorn-walk@8.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@8.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef31691f3867a982ab9187548c5d472356f3774572804197f25164e24e7354ca87128112f8ffbb4ca23e12f2cef5654c27c79e91d3b468310ad38e314d7c0f3c"
        }
      ],
      "purl": "pkg:npm/acorn@8.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2685f46a919b1da50904d97ac85fa9e89005619ebaebf86108628de6df501636c940a514fe0f0c35b1436ef7eb80a5ef23542966994f3a7c08a3df655ff00098"
        }
      ],
      "purl": "pkg:npm/ansi-colors@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f8dde3df38022ea6482e1d4c9cadce2a27d933f198ae3948a36844f05fb4c7b7463f18d2bbbf469af2b63cd7ac568d9eeb25d0395dd31ca5515328cabe46f5a"
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arg",
      "version": "4.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c4bd403a86d17c76ed8c0f4adf5f2718af8d8978df6602c1f0cc7d9fbbd5102a52b65e7fb2eb2906772c72cec024b814b341a653f9df7671f3de5278e087bc"
        }
      ],
      "purl": "pkg:npm/arg@4.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/arg@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e0b1a35dbb3fa776f1b216ddee4ae5aabf2e250a72098a8beda2e40de4964738a092d90ba111d6dc407161564b33d8dd94f615c9a3ca1d1bb113c969447ae0f"
        }
      ],
      "purl": "pkg:npm/assertion-error@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e196dd29960a482013864d3fde85f1676cd95fb03122aa6cc4d8a457a17d5b2c8962af85ff311fb34b204490bd397df5a09d149ffc35eff96ad4015afddffa3"
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fcba6f8bd51cccdd60d2cef866ea0233d727d36c1b7a61395c10a02fb26a82659170e3acfadba9558fd8f5c843d6df71f91fe94142964c3f593c97eefc1dad0"
        }
      ],
      "purl": "pkg:npm/braces@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983"
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a6cba161625098eee3849595126f1a365020c7f28c0493df7a8246eba6c806b6b24b33727b8c6c65f4873b430c23e22bce13901665644c79c0dd17b86a1a314"
        }
      ],
      "purl": "pkg:npm/camelcase@6.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "4.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6db729dd87c7094ccc3af2aab33b5ccdead5801292b048a30b248d9471db5f7546d67b24bea8f3e517eca35806c03eb0ea8395dde23ad292ae30e579315ee9dd"
        }
      ],
      "purl": "pkg:npm/chai@4.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/chai@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898"
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "check-error",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "574d312edd88bb5dd8912e9286dd6c0aed4aac82"
        }
      ],
      "purl": "pkg:npm/check-error@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/check-error@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ebdec7ca44fea84dc8dfd8999498525f79532f5c175e83107489543979bd95d74b852540804bc381c9975503255bf315cdcf71a38d3823f642d6b194ea13a93"
        }
      ],
      "purl": "pkg:npm/chokidar@3.5.3",
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39c444ebc70eb15317a7562fa2797f7f39103b28cb4aeffc6e13c37d0b747b4fc46f6f374ca3f6d05b3632aa0fb2bf52c00e7de6b44203e40ccd873d9c13fe25"
        }
      ],
      "purl": "pkg:npm/cliui@7.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/cliui@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-require",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75c2855f78e7d0ca486978e2b2846f7b12095442b36aaef3dab64ac5ff8c4abf5391d9879ac5389b695c2e88eb8ff14797c9a4e55c4c99803e7ed4643ffde829"
        }
      ],
      "purl": "pkg:npm/create-require@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/create-require@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff3c70e7ebe1d537effb8427edae67b1b70928f692bc20e1a239fa14497dbeea702b6542483b44884b6aafc0c5b7360539dcfadcb064c5e73b0d8b9cda3a27e9"
        }
      ],
      "purl": "pkg:npm/debug@4.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 4
          },
          {
            "location": "src/Walker.ts",
            "line": 1
          },
          {
            "location": "src/Walker.ts",
            "line": 22
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d15851ee494dde0ed4093ef9cd63b25c91eb758f4b793ae3ac1733cfcec7a40f9d9997ca947c520f122b305ea22f1d61951ce817fbb1bfbc234d85e870c5f91"
        }
      ],
      "purl": "pkg:npm/debug@4.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 4
          },
          {
            "location": "src/Walker.ts",
            "line": 1
          },
          {
            "location": "src/Walker.ts",
            "line": 22
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f621353e04a293d1de208c3624ef78222767137781a10ac5277c3bb05bb3497e03a66677bf9b19a54895e52c1c7fa990105f98d2bbbc35ea3ea7e9f287627e85"
        }
      ],
      "purl": "pkg:npm/decamelize@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-eql",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9078843237966e3bedd49390d887aff578a3b49b462624518d9851c6002a5fd4294bd679a557fa7880d81b976a491b18176f87daaa8e9413e33900210cc9573"
        }
      ],
      "purl": "pkg:npm/deep-eql@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd54c2aef9b9674246b72fc158796387e0408b0dc82beda3f3b34632ef0dc1cfdfe3c5a80c00b7f79ba898ef590f5d7b64e05a1e6917d68c8bbe454cfda213df"
        }
      ],
      "purl": "pkg:npm/diff@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec"
        }
      ],
      "purl": "pkg:npm/diff@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9347abda05242dff0ed332898808669139c9953bc8346bfbca00cd3db788b17fd3263189647ba1f41d94c5bb1a1249a5128f4c7e1ad2ce68489614652361979f"
        }
      ],
      "purl": "pkg:npm/escalade@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4eda5c349dd7033c771aaf2c591cc96956a346cd2e57103660091d6f58e6d9890fcf81ba7a05050320379f9bed10865e7cf93959ae145db2ae4b97ca90959d80"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ea3d17e74c5260b62dc6f805b56f9ca2714cf8c29be451a5ee200ee1abce42fb984565fdd8d84aed8e750d8f6b7d36378a2a91283d8abea368b589d94495a5"
        }
      ],
      "purl": "pkg:npm/fill-range@7.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efcfcf5d3d7094b2c3813cc3b3bb23abd873cf4bd70fece7fbbc32a447b87d74310a6766a9f1ac10f4319a2092408dda8c557dd5b552b2f36dac94625ba9c69e"
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fab2e103fb9ff7ad3a5405d1b582ea4897c30f14200c034417c269632e1bc250a714bdd138816932f73a6e1827171ceb33e09f703c6356aba38aa66233cf785"
        }
      ],
      "purl": "pkg:npm/flat@5.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/flat@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "10.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a115c0a6ae78113463e1e3221731a71d61b2fb3a39adab9d8eec4dd1bf07eecfd1536a16d16becc7d3b400244dfe446af44f15bbf45eb24181e68de38be1731d"
        }
      ],
      "purl": "pkg:npm/fs-extra@10.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "fs-extra"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 2
          },
          {
            "location": "src/Walker.ts",
            "line": 43
          },
          {
            "location": "src/Walker.ts",
            "line": 44
          },
          {
            "location": "src/Walker.ts",
            "line": 60
          },
          {
            "location": "src/Walker.ts",
            "line": 86
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-func-name",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ead774abee72e20409433a066366023dd6887a41"
        }
      ],
      "purl": "pkg:npm/get-func-name@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-func-name@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3"
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9662dfea0b72acfabcb538d29ab3bde3005e41b151dc76cb1dbbb20faf70bb2424226a76856a8c181e3b397eb914190f7df3bae3520ff6359ad73e22bea1b6e9"
        }
      ],
      "purl": "pkg:npm/glob@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7d151019b83c4771d5d441ecc14aec17a37a3bc2bc1ae89db2e386dfac1ee1988fc3c7b3b33fe59fabb79970e79d6f67bc9f4c28f856ecb2de6489cad0d645"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848"
        }
      ],
      "purl": "pkg:npm/growl@1.10.5",
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17fd439d418fa29391662d278be0afac28074391721001d12d2029b9858c9ab6d2c28376327ffb93e1a5dfc8099d1ef2c83664e962d7c221a877524e58d0ca1b"
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64c11161eb3aa43c9dcae1a276c7bb3ac1f1b5b23b595794128ce047f83baddd31522998365bd9444fcad8c8194e35b2ef6e487de94b79570433dee69ad4465f"
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e46d2d2ad05314898ea839cb076846e81a76a9c28415dba8e2d66ef4c4ff1fa350bff821872df4a39e6e7da7f127f2dd1fbf4b2ecd8a7eb9fce532cac80ec152"
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6169dfc91c312fff92b2b5987cea54b73e5bdd80fe9f27e41ef8db71a9f393cce0c8ee00483ebbb95311b7c9396cce252cc0e75dfae24613a97a6c3e35f4f578"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unicode-supported",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927c46daae140b7bbcb2d446c8054908e771166bf90d989171d94868041701b49f2726be3a1a29368b4b42bb2d061aaeaaee19a6e29b0dcffc4ba9a05e03c53f"
        }
      ],
      "purl": "pkg:npm/is-unicode-supported@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-unicode-supported@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c29c59b3d368c596891122462194f20c4698a65d0529203e141f5a262c9e98a84cc24c5083ade1e13d4a2605061e94ea3c33517269982ee82b46326506d5af44"
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5d8277563ab8984a6e5c9d86893616a52cd0ca3aa170c8307faebd44f59b067221af28fb3c476c5818269cb9fdf3e8ad58283cf5f367ddf9f637727de932a5d"
        }
      ],
      "purl": "pkg:npm/jsonfile@6.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f64ae9e6236f146edee078fd667712c10830914ca80a28a65dd1fb3baad148dc026fcc3ba282c1e0e03df3f77a54f3b6828fdcab67547c539f63470520d553"
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f173efa4003cbb285fb5ebbca48bd0c69259ed2618769522bd9a46cbab05b01b8a458ffbad019abde75e07c68af99932ababa930554bffd016eaf398cdf4722e"
        }
      ],
      "purl": "pkg:npm/log-symbols@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loupe",
      "version": "2.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3af29f8020b635d6f2e9a49344497968208f4cd2339437d066f671354ac1ae284384bdf172b61e8136e58661220ab83690a433e17b0521a7a6139045e326d269"
        }
      ],
      "purl": "pkg:npm/loupe@2.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/loupe@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-error",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3c52194d7bbbcf2a8990842d6a15e94ca24aff49cdc080d6eca379fbe2654f0392d3670901f4d9577f85cf6a62f1244f21d2087bdeb33de31bf0453d825489f"
        }
      ],
      "purl": "pkg:npm/make-error@1.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/make-error@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f54ab50a1b5264ef8cc5afc22f57868b39f6bd19f73252e0ce14f4233f33698f0d76fc6f07477941d3c598229fec9280f4b7abc79bd1ae7c0ed378ec49f186f6"
        }
      ],
      "purl": "pkg:npm/minimatch@4.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "9.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fa5c2dc47704fa62b224d325e96afbcb927f21f8453e63951c0872840b231b754231c8cb998f86d7e14f5ed67be7bd452f415b15d951d0af9ccb75c524856fe"
        }
      ],
      "purl": "pkg:npm/mocha@9.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/mocha@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fa56cff7286cb13d077ab8ed1e1f806fd288c6494bee2e5207b42dd8d2410edb761181ef07f71d460b32e7dbc617d07ebaa4c931b9a784485ab8b4a2122b077"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9e66ce4bb375ad0a2b075a9f52d86532f1daa4a468b80554b3dc66aa884e9ecee6f4e75d844b3b57530501e82e8829b4246363e76ff983e166288c24707302c"
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d839a9ccdf01b0346b193767154d83c0af0e39e319d78f9aa6585d5b12801ce3e714fe897b19587ba1d7af8e9d4534776e1dcdca64c70576ec54e5773ab8945"
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2da363b51594058fbecc1e6713f37071aa0cca548f93e4be647341d53cdd6cc24c9f2e9dca7a401aded7fed97f418ab74c8784ea7c47a696e8d8b1b29ab1b93f"
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathval",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e9eb31aaa537444dd47ade57a12583de20eaa988d04db5cec1a5648bace8deed4688b04e5a63ddabfc0ba7400eebb17bdeb7796b277267657dbd50f4ca5f229"
        }
      ],
      "purl": "pkg:npm/pathval@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/pathval@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21205a03cc50366c042c2ede3a3a8528c112076548aade0f3c30f49ec4bde5bffd7595ef54a3a5cfd91e3129e818629c3875df4ef0c3e9631a46849cf54ba144"
        }
      ],
      "purl": "pkg:npm/picomatch@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "254ded7874cd8e6136542185cee63c117cc20d5c04a81d9af1fb08bf0692b4784058911e55dd68d500fcd0253af997445d748b6d2b2e2f0263902056a9141454"
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84e4b4f3da27f1176ea9d6e1bd0e59dfb0341128ecab3eaa9d171f7ec314df8f7916e4dda929beedb849dbd26f20eb010c41276a7e433eef6ddd3a3d55194ccc"
        }
      ],
      "purl": "pkg:npm/readdirp@3.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42bdd3a2cbe0b85b7c78f5aab2f45facac905c8896fa719b629cbc5cadb83501c4f3771ac56b7e988ca64d3d7d0c615b35634b7c4c2cae44a637ae2555607d6a"
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9f3dcf91e22870a8fe8dfda22fd9fd60307f25395b56407a2a0b8c8aea8483555a1cba602c7c2aa39179ea89832198cc12fe61072e9ed57a196ddea97a9448a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-node",
      "version": "10.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36d572b153e4c71af0146514c466217eec7c93bf29401dc9a9805794b45981d194a933b9c14fd4c87a29e69ef48846c6841eeae4a9a26625346372a526b49c13"
        }
      ],
      "purl": "pkg:npm/ts-node@10.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/ts-node@10.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1faff9881f57653bec7b4e570ccbe6c80ea28fb30ffbd2d5727875bbf3b828423866a9a65ed74bb02ee8ee6caf6af4b83a162868d4a50a0d8cf467b93b839fe"
        }
      ],
      "purl": "pkg:npm/type-detect@4.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40287ef39982cbe8742067dff2be575b339549b04ef8a7de62b31087b349e7c42e8f0704db6bbe3544a6531a85fae9fbd0ff465cac5ad8708d8934cc2649f28d"
        }
      ],
      "purl": "pkg:npm/typescript@4.8.4",
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84066c2aaed8cb5d59bb50c4d0ecd68f0ee79cb6662596130d96721051d9754855f05907e4c09fa14d5731ac57a2fa725b99eae6c70faaad190cff59ca5d38a1"
        }
      ],
      "purl": "pkg:npm/universalify@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-compile-cache-lib",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1aed88f25067cd667808fefb4ad141c037e9600c2c413c2ca55571a9d33bb9f45cf96a21ad3576aadc3848a2fd3adcca2b07e55fb9f2e1dc9945d8a7532b7c6"
        }
      ],
      "purl": "pkg:npm/v8-compile-cache-lib@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/v8-compile-cache-lib@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workerpool",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46c939a901c9f5ea30307dbc27085ef0711b99d6035f8970a0c5ac862097ba08ed1ea303f596e2a920cbc5cb1f76ab044cfcd552d5f9b35679912b6220cea5e0"
        }
      ],
      "purl": "pkg:npm/workerpool@6.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/workerpool@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "5.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d297c5cde81e0d62472480264cb44fd83c078dd179b3b8e8f6dbb3b5d43102120d09dbd2fb79c620da8f774d00a61a8947fd0b8403544baffeed209bf7c60e7c"
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58e92980d84f4e513bde1e1514016c3a7a262556a8bcef15a8b0f3cb9b1a0a1441150141a0c622ae8c325be43d1c1e07145e19ed5653886de24b3249036f7244"
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb5d67184953215f824f766ff6ded52a5f90de14d0a13f5ad50cdece1865e91a76d6027f2154d6ed9df2f4459786e5010b64a19dff835f46a7b5e72903048ff3"
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs-unparser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee9453200f5073571a6746d9e9161119b1c9b61256b9a91ff969872b4ad578b90daeb1a17e869b04d76e7ba91d20d23aaf889fee872af5a0ff9fbc7028e77338"
        }
      ],
      "purl": "pkg:npm/yargs-unparser@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-unparser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "16.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f59afbed0c6d0be5fb7f8c65a42e91b5fa6d1e43139f681bd33442eb6968f6db049550c5b1654bd880961c2a1ea3186224245847e0864f4214784caa5cf2607"
        }
      ],
      "purl": "pkg:npm/yargs@16.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/yargs@16.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yn",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "531e328065acbb673b8ac1567bc62ed5896e266a95871a8ad9c2d735003901c0b741f6c636933b7eed18f1bff3d7aa572e7171658bd685dddf84163d0cb982e9"
        }
      ],
      "purl": "pkg:npm/yn@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/yn@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad592cbec9cd09d27fa2119ceb180fc3237c7a1782c6c88b33c9b1b84fedfe6395a897b03ee3b59a22e94c74224604ca08b7b12f831e00555a82db3b1e6359d9"
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abstract-socket",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad9dc6e84aa4762ffd3f362ed375edd50119f5a1d84e7529c4bc95e44b6333fd3a0420f360e45301f9824402fa8c88fdf18a95be228682dd6a5dc154b0ce1ed3"
        }
      ],
      "purl": "pkg:npm/abstract-socket@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/abstract-socket@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9df7e13a99329831024324749a7b14b68084f11957dfc1b4ad83fec202d617266e532baea23492be2ffe7ae3a2401227eb7c216306152081f54ef137b6ee0e12"
        }
      ],
      "purl": "pkg:npm/ajv@6.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-find-index",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df010aa1287e164bbda6f9723b0a96a1ec4187a1"
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/array-find-index@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asar",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "301883539703afd516b98d85d33ab67d9967c91ab568e3e624631ab36d906b5e0ad687694572f7c643073cddeec368402b9983f3d43efca89d394b698b85740a"
        }
      ],
      "purl": "pkg:npm/asar@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/asar@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f1c334292d08d29965e0c1a09913d373fa09401b4d721754275a06e11b01c8e40e85448118e8856ab478487a91ea23bfe4c84c9011a8010b998110594862f76"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "author-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d08885be6b9bbf9439fe087c76287245f0a81450"
        }
      ],
      "purl": "pkg:npm/author-regex@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/author-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45e671bcd1c83aff3c1654fbaf17172080b47cfb78299a996ce962bf25ad5cbb7c112c7ce3377790c0ba88ae6355e4b6aadfa0edfb52ef27b87e2d3a5f9aed45"
        }
      ],
      "purl": "pkg:npm/aws4@1.8.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a39992d723584811982be5e290bb6a53d86700f1"
        }
      ],
      "purl": "pkg:npm/base64-js@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71c6afff21afa1af340500e58c2c6c9a64375efc7ad3f5290488a3e50376d56df0062fe18480bd3a83be28ba6ef482534bd8f80d1549dda0c317d70c4a86b697"
        }
      ],
      "purl": "pkg:npm/base64-js@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bignumber.js",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "838a992da9f9d737e0f4b2db0be62bb09dd0c5e8"
        }
      ],
      "purl": "pkg:npm/bignumber.js@2.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/bignumber.js@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bindings",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89"
        }
      ],
      "purl": "pkg:npm/bindings@1.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/bindings@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5a9ba1e79df37ebabcede327e0ec88136e8b438c84ffbbc009a44b74b0853d16d5df55e7b35c03cab30ac6fb129408e60020da527606550d4e90161f9cb87df"
        }
      ],
      "purl": "pkg:npm/bluebird@3.5.5",
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bmp-js",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64113e9c7cf1202b376ed607bf30626ebe57b18a"
        }
      ],
      "purl": "pkg:npm/bmp-js@0.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/bmp-js@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc-unsafe",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c433688c20441d276ca33c9a1222c95d9e5795680935a16dc305553293238bb04b0598473d927f921453f3fa0979e0a40dc650e7030097a2c392f4e931db102"
        }
      ],
      "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "085b074208ed5b550285d5e06f2246b679be3bfb8b41e65db5b0e8f267d48185c21d2335c20ad5c579ba6d2cab52e12b11bfb8b185460b3012051a2def3caba3"
        }
      ],
      "purl": "pkg:npm/buffer-alloc@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-equal",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91bc74b11ea405bc916bc6aa908faafa5b4aac4b"
        }
      ],
      "purl": "pkg:npm/buffer-equal@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-equal@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-fill",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8f78b76789888ef39f205cd637f68e702122b2c"
        }
      ],
      "purl": "pkg:npm/buffer-fill@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-fill@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308beeaffdf28119051efa1d932213c91b8f92e7"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chromium-pickle-js",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04a106672c18b085ab774d983dfa3ea138f22205"
        }
      ],
      "purl": "pkg:npm/chromium-pickle-js@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/chromium-pickle-js@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee3db2fb8d30eb5cf2e980b689136951efcdc21372a17ad8a4732b4ae9da306eb89d19da7fdeb33bf28c411e0ec8dfd49c4e4a2f21019ca1dde1a1b7aec923a5"
        }
      ],
      "purl": "pkg:npm/commander@2.20.0",
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compare-version",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0162ec2d9351f5ddd59a9202cba935366a725080"
        }
      ],
      "purl": "pkg:npm/compare-version@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/compare-version@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cuint",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "408086d409550c2631155619e9fa7bcadc3b991b"
        }
      ],
      "purl": "pkg:npm/cuint@0.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/cuint@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "988df33feab191ef799a61369dd76c17adf957ea"
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/currently-unhandled@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dbus-next",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e21baeaa612b080b69ef1efb2a60578358c3ff45e3fb3537af9dcc5697e43b5ed0202c1bbda642ac400e8eaa39b4c3f8b726ce944a6c822bad63241d8ee85e63"
        }
      ],
      "purl": "pkg:npm/dbus-next@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/dbus-next@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dbus-next",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f3b2e7535f91cc2e8712bb01de7c8a21b68f0be069e1e524f6f95340a1ac7d5eeae1fa54e8b265c87e08bf32b73ddefa945370f5bfb8c4f7fbe38967772886c"
        }
      ],
      "purl": "pkg:npm/dbus-next@0.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/dbus-next@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 4
          },
          {
            "location": "src/Walker.ts",
            "line": 1
          },
          {
            "location": "src/Walker.ts",
            "line": 22
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e97e8dfee7aed125e4f9f5431e3acc0457283a416efcdecec7bba7b2ea20d99da0893c3d83f94b249ac44998bfa4d9d09c84280d61b0221de832218084ed59"
        }
      ],
      "purl": "pkg:npm/debug@3.2.6",
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 4
          },
          {
            "location": "src/Walker.ts",
            "line": 1
          },
          {
            "location": "src/Walker.ts",
            "line": 22
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a58008cde468f09e8a3c4689d1558e8793f391bc3f45eb6ecde84633b411457e617b87cf1f1dab74a301db9e9e8490a45fe5d1426d7a7992ea2cd4bc45265767"
        }
      ],
      "purl": "pkg:npm/debug@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 4
          },
          {
            "location": "src/Walker.ts",
            "line": 1
          },
          {
            "location": "src/Walker.ts",
            "line": 22
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d"
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-walk",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "672226dc74c8f799ad35307df936aba11acd6018"
        }
      ],
      "purl": "pkg:npm/dom-walk@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/dom-walk@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a83a904e54353287874c564b7549386849a98c9"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-download",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1631161bd25bfe9a4aff6cd3a0ff94e5d76cd75e1f33564e26a3004786975cbe42bf23c4f5f8aa04affd61cc02f69a081504c4264fc433fcf2470ce2ce2459ae"
        }
      ],
      "purl": "pkg:npm/electron-download@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/electron-download@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-notarize",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "633aea67a44343b5add915a5c73468414bb19d3797adfa7b95a1fb5ca72642aad9e86680af9d0330fbc5329a8329dad948749b72066007b92d2106e3bc84e609"
        }
      ],
      "purl": "pkg:npm/electron-notarize@0.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/electron-notarize@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-osx-sign",
      "version": "0.4.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "555778d27ae756aca6bc5ad8f5990e6201c93af7b11c7613477762fd237e9a3274396851d48f014558f753e61a9b0ea19e465934a669e76aea2f91050003c591"
        }
      ],
      "purl": "pkg:npm/electron-osx-sign@0.4.11",
      "type": "library",
      "bom-ref": "pkg:npm/electron-osx-sign@0.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-packager",
      "version": "13.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc3ae0730f0e10e3f73ecc3f3e9ae5a001494a449449082352adc09967df2460772a3e565e6665e80dc6394b3c693edb3fff065a0e2862a4a20929c0e4f42475"
        }
      ],
      "purl": "pkg:npm/electron-packager@13.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/electron-packager@13.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "env-paths",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4168133b42bb05c38a35b1ae4397c8298ab369e0"
        }
      ],
      "purl": "pkg:npm/env-paths@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc365f83fca4371415c2ea7ff04d4166157315f071b3d36a33319cbc826baa0e64dbfe596b66d6a38d1d2b6275a602e7819edcf92861f25c18b4b1b2af03eeb6"
        }
      ],
      "purl": "pkg:npm/es-abstract@1.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a99af204e26357ffcb6b12d357a502fff59ec27781dcb71738bf4d3fefa8cca557b08208a66ff6735dd40e20fd269d9e4e1b1e730f66de33ea0f04f2a1b71d6e"
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a08cdde84ccdbf34d027a1451bc91d4bcd28a613"
        }
      ],
      "purl": "pkg:npm/es6-promise@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
        }
      ],
      "purl": "pkg:npm/event-stream@3.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exif-parser",
      "version": "0.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58a9d2d72c02c1f6f02a0ef4a9166272b7760922"
        }
      ],
      "purl": "pkg:npm/exif-parser@0.1.12",
      "type": "library",
      "bom-ref": "pkg:npm/exif-parser@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-zip",
      "version": "1.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a840b4b8af6403264c8db57f4f1a74333ef81fe9"
        }
      ],
      "purl": "pkg:npm/extract-zip@1.6.7",
      "type": "library",
      "bom-ref": "pkg:npm/extract-zip@1.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e2689f8f356fad62cca65a3a91c5df5f9551692f"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b05218ddf9667bf7f370bf7fdb2cb15fdd0aa49"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5142c0caee6b1189f87d3a76111064f86c8bbf2"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fd-slicer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b5bcbd9ec327c5041bf9ab023fd6750f1177e65"
        }
      ],
      "purl": "pkg:npm/fd-slicer@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fd-slicer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-type",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "257a078384d1db8087bc449d107d52a52672b9e9"
        }
      ],
      "purl": "pkg:npm/file-type@3.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-type@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-uri-to-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f"
        }
      ],
      "purl": "pkg:npm/file-uri-to-path@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-uri-to-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
        }
      ],
      "purl": "pkg:npm/find-up@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flora-colossus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "54729c361edecee014dd441679e1a37c1d773a45"
        }
      ],
      "purl": "pkg:npm/flora-colossus@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/flora-colossus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-each",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ea61f2e9ee6a3dbc8c907fcca45b6bfb03ed8de108de09e239f83cfd5eb6a23b58a09fcd708e21fb15bf6f48e5af41f36d9926b81f6468413aeb5e2bdd5199b"
        }
      ],
      "purl": "pkg:npm/for-each@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "from",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83c60afc58b9c56997007ed1a768b3ab303a44fe"
        }
      ],
      "purl": "pkg:npm/from@0.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/from@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "4.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abaadb743775a369809d0ade3bb6000c8c5ffd6871e001c18917fa77efdc553f21e38b2cfa51e0c5fd457a672a0e742df57ddcb7831c1ebf893069584ac2bb0a"
        }
      ],
      "purl": "pkg:npm/fs-extra@4.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "fs-extra"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 2
          },
          {
            "location": "src/Walker.ts",
            "line": 43
          },
          {
            "location": "src/Walker.ts",
            "line": 44
          },
          {
            "location": "src/Walker.ts",
            "line": 60
          },
          {
            "location": "src/Walker.ts",
            "line": 86
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "7.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6090da0896449c199c6f0d777ef74033d03034e2703b3ac4e29a8ca81ab99c5884a9752a1f094ae01fb7a54c3a24dbdf48fb57d39c451ed632ff59e2d357860b"
        }
      ],
      "purl": "pkg:npm/fs-extra@7.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "fs-extra"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "lib/Walker.js",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 2
          },
          {
            "location": "src/Walker.ts",
            "line": 43
          },
          {
            "location": "src/Walker.ts",
            "line": 44
          },
          {
            "location": "src/Walker.ts",
            "line": 60
          },
          {
            "location": "src/Walker.ts",
            "line": 86
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "galactus",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbed2d20a40c1f5679a35908e2b9415733e78db9"
        }
      ],
      "purl": "pkg:npm/galactus@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/galactus@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-package-info",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6432796563e28113cd9474dbbd00052985a4999c"
        }
      ],
      "purl": "pkg:npm/get-package-info@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-package-info@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8642cf7a97a19a72a4e35a541a6dec631a05b3fba6bab61f60909eadb5c4c85216700cefa62a40815901aaa4fd44128c1a39eaea432ec98c216ba72cc5b88cd4"
        }
      ],
      "purl": "pkg:npm/glob@7.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e76989268a6c74c38908b1305b10fc0e394e9d0f"
        }
      ],
      "purl": "pkg:npm/global@4.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/global@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae1d484e3c4060436e0733eafa6ff43059f66afb2885722a4a16b38588112759dcb9b1dcd8a22fa925e41a3c8e6a38b445a969805d43d036c89e97374ba1e70"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.15",
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a94c2224ebcac04782a0d9035521f24735b7ec92"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0dbce0b311036bfeaaef260737506fe40f842d947c9caf3c12fba99f4ebad2abdec1bda61c3d9648d594aa1923d1ef70b19f82ca4c3e0fb6d4707d4ee35aae6"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba1a8f1af2a0fc39650f5c850367704122063b44"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hexy",
      "version": "0.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "722aba845b121bf069b760e6ad926dbfee7ace93dd9eaf8d4388a3105aef78a374646d66865fcb753d4d419f6c7bab72d5f002708e1de2f62a0bdbfc118a47d8"
        }
      ],
      "purl": "pkg:npm/hexy@0.2.11",
      "type": "library",
      "bom-ref": "pkg:npm/hexy@0.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed3fc1c47d7dcdb7024daf1790c95b2b9953a355ad824162dc6bdd584c8db9ce157b1efff43a9b9e9b1fe0933275c7e3f470a0e335161532f765aea56a9839ff"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.7.1",
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e2d48348742121b4a8218b7a137e9a52049dc80"
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45963986e20a08c4560d4a999448bbd9ffe599728cbeeb3370c05dba5890de79d66f1f57fd90503bb0e28cc1184bd1211c16f6a9a71150cb42eecbcbc1ed2573"
        }
      ],
      "purl": "pkg:npm/ini@1.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip-regex",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc589076f659f419c222039a33316f1c7387effd"
        }
      ],
      "purl": "pkg:npm/ip-regex@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/ip-regex@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af9a7db3126362702b2e339ba63038c6ee44288dc2b8a1e42573214fb9306e95322050f59f93cc02ca0fbd69efb5988dcfb2e39180d166177b16523478c8a310"
        }
      ],
      "purl": "pkg:npm/is-callable@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa"
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-function",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12cfb98b65b57dd3d193a3121f5f6e2f437602b5"
        }
      ],
      "purl": "pkg:npm/is-function@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-function@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5517489b547091b0930e095654ced25ee97e9491"
        }
      ],
      "purl": "pkg:npm/is-regex@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d2f1b67da31eb4c8224b1fdb27069230bfda5850091cb8b852035a1eae8d54079cbd6a2429440f32d9ec7de3900eb4264bd652437889371b92ed86cc08e3a2f"
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isbinaryfile",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1c2412f9b53776392d1d3388f3d3bc107798347420aa2215313c81ad65f6b92fa85696f5793074c84f2fc3040b05f8e7b62d2d57de4ac1521370686516a56c7"
        }
      ],
      "purl": "pkg:npm/isbinaryfile@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/isbinaryfile@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jimp",
      "version": "0.2.28",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd529a937190f42957a7937d1acc3a7762996ea2"
        }
      ],
      "purl": "pkg:npm/jimp@0.2.28",
      "type": "library",
      "bom-ref": "pkg:npm/jimp@0.2.28",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jpeg-js",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53e448ec9d263e683266467e9442d2c5a2ef5482"
        }
      ],
      "purl": "pkg:npm/jpeg-js@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/jpeg-js@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbi",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f33bfeb61f179bdba40c6f8206948ff95fe40bafd52aa7514f930a76f8a388096f90faf4ae163eb573ca644fac009ece1670ae7a5fb0a64878497831963aac5"
        }
      ],
      "purl": "pkg:npm/jsbi@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/jsbi@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8771aae0799b64076b76640fca058f9c10e33ecb"
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-bmfont",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "913eb7693025361640468c1a358718dbd167fd0624739d8cde5e95d627d170f7b083696f5190c08fb47a7578ce2fd0f4b2272defaa29dd3e7ea1dba60d217cd6"
        }
      ],
      "purl": "pkg:npm/load-bmfont@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-bmfont@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7947e42149af80d696cbf797bcaabcfe1fe29ca8"
        }
      ],
      "purl": "pkg:npm/load-json-file@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.get",
      "version": "4.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d177f652fa31e939b4438d5341499dfa3825e99"
        }
      ],
      "purl": "pkg:npm/lodash.get@4.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.get@4.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "long",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ec3fe2a14227f86e35f591bb928b248914d01e84dc602dbea13d1189f50b14afc6a31e4b9719dac79855135145e10f0557d91e5b63824d644c1b52232157e30"
        }
      ],
      "purl": "pkg:npm/long@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/long@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loud-rejection",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b46f80147edee578870f086d04821cf998e551f"
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/loud-rejection@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e56aa94c4c8055a16404a0674b78f215f7c8e194"
        }
      ],
      "purl": "pkg:npm/map-stream@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72cb668b425228290abbfa856892587308a801fb"
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.40.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d875e38c3f2f6f9f112a151468e99bd367c77da0f6fe935f0f2a860d6147b6b2d54404f3f0b259ffa96cdd6e6688be7859f6fd8ff82b9e70af9fa547ec57698"
        }
      ],
      "purl": "pkg:npm/mime-db@1.40.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.40.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59a1474b73029797daa66de82f15387980f0efb21033600273143d448c5f682de8a1ce8f16e04c19966c629be85d2e43e504d63e27a8d638cb7409b74c13f771"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.24",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "min-document",
      "version": "2.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7bd282e3f5842ed295bb748cdd9f1ffa2c824685"
        }
      ],
      "purl": "pkg:npm/min-document@2.19.0",
      "type": "library",
      "bom-ref": "pkg:npm/min-document@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mpris-service",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d61629ad598adf9bb88ccfc5634eb63af1cdafc0131be640d7a8043d1a680832fe5ec5f833fb0dbbec5d5714173bd8dbba14cdd01fa8ea3064fcf66d8c30306"
        }
      ],
      "purl": "pkg:npm/mpris-service@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/mpris-service@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20d3858f7ec2ee4dc07da353b57f1186c4f0eea472ede2c44f5e1c44e8bdfb91c055b6c7b885941c46ae06fe6a4f802fdad59ab224d8d49c3aa6e50da9125742"
        }
      ],
      "purl": "pkg:npm/nan@2.14.0",
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nugget",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "201095a487e1ad36081b3432fa3cada4f8d071b0"
        }
      ],
      "purl": "pkg:npm/nugget@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/nugget@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "28a6aae7428dd2c3a92f3d95f21335dd204e0336"
        }
      ],
      "purl": "pkg:npm/object-keys@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5"
        }
      ],
      "purl": "pkg:npm/p-limit@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
        }
      ],
      "purl": "pkg:npm/p-try@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-try@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-author",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3460bf1ddd0dfaeed42da754242e65fb684a81f"
        }
      ],
      "purl": "pkg:npm/parse-author@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-author@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-ascii",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11ac3c3ff58f7c2020ab22769079108d4dfa0285"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-binary",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d038b476d3e9dd9db1e11a0b0e53a22792b69006"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-binary@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-xml",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e39e58843a61afdf2d5a3047d110c049f6d7cbdd64748b408a3e3eb50e748b6a8c564779cbaec42b11b08877ff2b178372445d1c0aa8ac4955f241858cfa609"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-xml@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-xml@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-headers",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcbca9261cc59b20480d83fd6835607b211be6c41f6df6399a70eae21561950ebd8ecf3bc177e6108e55df123abef5dab2a79ba74a02cad6052f1b0155f0b34a"
        }
      ],
      "purl": "pkg:npm/parse-headers@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/parse-headers@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19298e4f611b1eb20d05ff5247b08310bc2527c004364dd09fb3a290ae2715802edceb5edbe258355be4a401109b7fd32cd109143ff16498f3cb183728158ecf"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f012ccb8415b7096fc2daa1054c3d72389594c73"
        }
      ],
      "purl": "pkg:npm/path-type@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-type@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause-stream",
      "version": "0.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe5a34b0cbce12b5aa6a2b403ee2e73b602f1445"
        }
      ],
      "purl": "pkg:npm/pause-stream@0.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/pause-stream@0.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a57eb550a6783f9115331fcf4663d5c8e007a50"
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "phin",
      "version": "2.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b316bf74a8cdb88eee5ff3caae142ffaaa88630b5e38ade85ee67e831fdd349605e651ef3afb108a735d1ebf9ea044a0b8fc19075281b8b928908018885f00c"
        }
      ],
      "purl": "pkg:npm/phin@2.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/phin@2.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da"
        }
      ],
      "purl": "pkg:npm/pify@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pify@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pixelmatch",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f47dcec5011b477b67db03c243bc1f3085e8854"
        }
      ],
      "purl": "pkg:npm/pixelmatch@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/pixelmatch@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "plist",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57ccdb7a0821df21831217a3cad54e3e146a1025"
        }
      ],
      "purl": "pkg:npm/plist@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/plist@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "plist",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a982f1c7a1c191c909bbe1be85584659551ae81ca135234fc14e3026c926a884af9c527fa16696ea5e4737296816de041892a7107a3df916885c4f415196445"
        }
      ],
      "purl": "pkg:npm/plist@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/plist@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "342ac21e15a69d09257c7e0cb493118d9d9af1cf34a9778c95032fdae569f48489313b79eb649b19dea7da8ab43da3e02a6ed9ea92fd1365252c8842f921cbdf"
        }
      ],
      "purl": "pkg:npm/pngjs@3.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a22e8210609ad35542f8c8d5d2159aff0751c84"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d102d53a8dd045399dea61689e2b02d4e11ed0bce9d34df6a0ae121b6c86fa55064016e593bb04048df5112717d7a85c6711b9bfa916e284a4e1c4f876c433"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1638d8a8e34c2f440a91db95ab9aeb677fc185cf"
        }
      ],
      "purl": "pkg:npm/process@0.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/process@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress-stream",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2cd3cfea33ba3a89c9c121ec3347abe9ab125f77"
        }
      ],
      "purl": "pkg:npm/progress-stream@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/progress-stream@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.1.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3070020241e98a153f4441863cb8f8b047dcfd7296d9b85e8a0bc73b5754aa368a8a0329d42f3e58b41844681e28532cc393cc7de81971a37c2035cafdc0f4fa"
        }
      ],
      "purl": "pkg:npm/psl@1.1.32",
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.1.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0"
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "put",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30f5f60bd6e4389bd329e16a25386cbb2e4a00a3"
        }
      ],
      "purl": "pkg:npm/put@0.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/put@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318"
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76c682a2a3dd005dc4b6cb9289a5a2192fb00f207408944254812670617e7f813f18386dceb677c4dc056d79c1abc37e07b10a071c72485c66fcb0c9060f3b"
        }
      ],
      "purl": "pkg:npm/rc@1.2.8",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rcedit",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf6ca907881b20d848eb055ed0924c99da663a998d73883dd2c13affa252b9c8799189e37f3f42c6f54faaa85286047a188926b56dd6d9495f89785696303417"
        }
      ],
      "purl": "pkg:npm/rcedit@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/rcedit@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-chunk",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5f68cab307e663f19993527d9b589cace4661194"
        }
      ],
      "purl": "pkg:npm/read-chunk@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/read-chunk@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b72a8048984e0c41e79510fd5e9fa99b3b549be"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ef1c0623c6a6db0dc6713c4bfac46332b2368f8"
        }
      ],
      "purl": "pkg:npm/read-pkg@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b50b4a03d588021045dfe54b02c7b232a65e0635b4007268c4eb58a92519349c5ab84ae62db566d855b5cbe27f600f5d52b002dfd2137a39595a1548c1ac242b"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cf4c54ef648e3813084c636dd2079e166c081d9"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redent",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/redent@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5214c53a926d3552707527fbab415dbc08d06dda"
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "340a814ab8a318b65d33459936c2272c9a6426890bef65d88d4a670748b0b1183187b741e823ab1e74c137037413e9470c0273bbb90b0240de634f33dbf03486"
        }
      ],
      "purl": "pkg:npm/request@2.88.0",
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc8a6017ac1fb8939923b28a2923fe1e688a82069d3d001db29e47882d66bea9dfa74805d6f77080159921dad57edf6982aa0c15037e47b052599881c71f8107"
        }
      ],
      "purl": "pkg:npm/resolve@1.11.1",
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b0a9e5b95ec036a807a31b8ea061d10d6b15e3c7da2744d09f9fb2f476eb8fe210ae4c88bf40eecf0cad3b2897e9d5dfa2cd63ebcc4243712a816b439942b88"
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.3",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sanitize-filename",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "612da1c96473fa02dccda92dcd5b4ab164a6772a"
        }
      ],
      "purl": "pkg:npm/sanitize-filename@1.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/sanitize-filename@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ae768d25f6bbb40a821c5ea051a92f00ad1a5b7b8f4a18f4361be5aa6df673e5278d880feba54d71129edfea010728484472679b25dcb0c83b0d27027ff90c"
        }
      ],
      "purl": "pkg:npm/semver@5.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "single-line-log",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c2f83f273a3e1a16edb0995661da0ed5ef033364"
        }
      ],
      "purl": "pkg:npm/single-line-log@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/single-line-log@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e21d8f6efcb2d79104d361be24e6695029aa589baaaecfac124cdec139bef813e2ec7be7fc7c1ca8b01c371600c88d31d770a93cf9fe90c8e5fa1a655cc1c84d"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.12",
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96bd8464272d0b604d47b8fb5b32761690f39f1932d6c8dfc6fbd8132cf13726fa9595c7383984a09785bb826ea589647e16b5299a49ca8aa227ba60035aaaf1"
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9740009f1252a2f529556f509869d2835efa1a8cf80154f9ff80e40bad3bc774495a561afb6446ea25a46724b54d79a23870c10081509e04c285e8c5910c244"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "620e83dd7a510f89243a64e97606d48842452a08491f4ddf882d4e3e597987fd2c3ba9de8768ea443547390e28fcb31e6b4b600a46cc81e6b98a9fdef8c916ca"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee3f0b6092de63f61be8009b43b17beaacb98c7929d14ea38017c9b24f7b6f05a55549d45ac020a72682be8d7b874fd14069d0d37ead543a268b0a08e290e440"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "speedometer",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9876dbd2a169d3115402d48e6ea6329c8816a50d"
        }
      ],
      "purl": "pkg:npm/speedometer@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/speedometer@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd0eea5e63a211dfff7eb0f091c4133e2d0dd28f"
        }
      ],
      "purl": "pkg:npm/split@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/split@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.16.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d75ea554abbfa970a78baaa663ea61c550cbd7b4e26dd6ea14c74f69156eb4d758a74ccc6a23c040f0f33de66cab232c8ac1d9f38dd1632e213a2813d5b4922"
        }
      ],
      "purl": "pkg:npm/sshpk@1.16.1",
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d5e433c185261dde623ca3f44c586bcf5c4ad14"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-to-buffer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26799d903ab2025c9bd550ac47171b00f8dd80a9"
        }
      ],
      "purl": "pkg:npm/stream-to-buffer@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/stream-to-buffer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-to",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84306098d85fdb990b9fa300b1b3ccf55e8ef01d"
        }
      ],
      "purl": "pkg:npm/stream-to@0.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/stream-to@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trim",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d04de2c89e137f4d7d206f086b5ed2fae6be8cea"
        }
      ],
      "purl": "pkg:npm/string.prototype.trim@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trim@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-indent",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sumchecker",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f42c10e5d05da5d42eea3e56c3399a37d6c5b3e"
        }
      ],
      "purl": "pkg:npm/sumchecker@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/sumchecker@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throttleit",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfedf88e60c00dd9697b61fdd2a8343a9b680eaf"
        }
      ],
      "purl": "pkg:npm/throttleit@0.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/throttleit@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb3284da4ea311b6cc8ace3653748a52abf25a3f"
        }
      ],
      "purl": "pkg:npm/through2@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor2",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f4fad333447bc0b07d4dc8e9209d8f39a8ac77e8"
        }
      ],
      "purl": "pkg:npm/tinycolor2@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor2@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp-promise",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3e021f5a0752115c29c83b15d9d2e168cd5d67314e718aeee18455544b16776d8bbea6c0f84f36a00b355b7b150280d346267b263434254b89c6de64f2a0d93"
        }
      ],
      "purl": "pkg:npm/tmp-promise@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/tmp-promise@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27b6762b4f236c671d035924429252a8b17a4f4b5d42aa51da99d2517b087216cf75323dbf77bce5c2d6d1de960e1c2e02578e57bd63db15acf2a30f7caee72b"
        }
      ],
      "purl": "pkg:npm/tmp@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "439b2b93fe2f0cce78589b098a8dd7367e8adac086f8243c1b95b3e9b661459a007bff93c63581fc69450276046e461594e37d14c93f7c4de1d912e93d7a3895"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.4.3",
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-newlines",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5887966bb582a4503a41eb524f7d35011815a613"
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "truncate-utf8-bytes",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "405923909592d56f78a5818434b0b78489ca5f2b"
        }
      ],
      "purl": "pkg:npm/truncate-utf8-bytes@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/truncate-utf8-bytes@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac125e2390970259b2d6957eeb5ed607d27add4e9771acc71c5d9fd9d6c98b1e17ce9505d114b765b8f414620e080bdae4ffddfc604e61a002435c3ed1acd492"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "298f45ae68abaa5f755f64208ebcb459de18f984ddadd661792f13170be46cb59ffc6e4a3490c287aa4a2f939972d116e3ed0169ae6274ad9942e10b4703f39d"
        }
      ],
      "purl": "pkg:npm/uri-js@4.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-regex",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbad1e0c9e29e105dd0b1f09f6862f7fdb482724"
        }
      ],
      "purl": "pkg:npm/url-regex@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/url-regex@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utf8-byte-length",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f45f150c4c66eee968186505ab93fcbb8ad6bf61"
        }
      ],
      "purl": "pkg:npm/utf8-byte-length@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/utf8-byte-length@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9726678d6b0dc39e728038a244e75b0bfd96987d6251975a4af5daf5f58142bb439b4b6df5001d7f2dba93291010e64c3c03dd2b03a7ebe2b88e5294d9bd064"
        }
      ],
      "purl": "pkg:npm/uuid@3.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xhr",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2794eff5e2ddc13546515c85df5defb737ac37b352a8c5c25451445cb5deb804b45eebb138811c29e0f8f2c2d0d8ef67d7a59d72e8287455941163f80c3f3cd"
        }
      ],
      "purl": "pkg:npm/xhr@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/xhr@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-parse-from-string",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9029e929d3dbcded169f3c6e28238d95a5d5a28"
        }
      ],
      "purl": "pkg:npm/xml-parse-from-string@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.4.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ac66725924e88947dc1628ccaebd2135cba0eae4b0ae25a9ea871b251f66f133a76e6a1359f8732908b8414066646d7eb145ff31d58d9e26582ddaadeaa38f5"
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.19",
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "8.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "69248673410b4ba42e1a6136551d2922335aa773"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@8.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@8.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "9.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "132ee63d2ec5565c557e20f4c22df9aca686b10d"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@9.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@9.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmldom",
      "version": "0.1.27",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d501f97b3bdb403af8ef9ecc20573187aadac0e9"
        }
      ],
      "purl": "pkg:npm/xmldom@0.1.27",
      "type": "library",
      "bom-ref": "pkg:npm/xmldom@0.1.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6efecc2a4dad8e6962c4901b337ce7ba87b5d28b"
        }
      ],
      "purl": "pkg:npm/xtend@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/xtend@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "13.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15015b07cfab85ae0dd7421785208f0448edacb007fd96e5ae01de967b1b2ee05dceb485b4a3c22b89b3d762b0f8582db82d6b4fac9946cbcef2e6e74af9dc5"
        }
      ],
      "purl": "pkg:npm/yargs-parser@13.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@13.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9528f442dab1b2284e58b4379bb194e22e0c4005"
        }
      ],
      "purl": "pkg:npm/yauzl@2.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@cspotcode/source-map-support@0.8.1",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.9"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.0",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@tsconfig/node10@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node12@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node14@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node16@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/chai@4.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/debug@4.1.7",
      "dependsOn": [
        "pkg:npm/@types/ms@0.7.31"
      ]
    },
    {
      "ref": "pkg:npm/@types/fs-extra@9.0.13",
      "dependsOn": [
        "pkg:npm/@types/node@13.7.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/mocha@10.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/ms@0.7.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@13.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@12.20.55",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ungap/promise-all-settled@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-walk@8.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@8.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-colors@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@3.1.2",
      "dependsOn": [
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/picomatch@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/arg@4.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assertion-error@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/binary-extensions@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.2",
      "dependsOn": [
        "pkg:npm/fill-range@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@4.3.6",
      "dependsOn": [
        "pkg:npm/assertion-error@1.1.0",
        "pkg:npm/check-error@1.0.2",
        "pkg:npm/deep-eql@3.0.1",
        "pkg:npm/get-func-name@2.0.0",
        "pkg:npm/loupe@2.3.4",
        "pkg:npm/pathval@1.1.1",
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/chalk@4.1.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/check-error@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chokidar@3.5.3",
      "dependsOn": [
        "pkg:npm/anymatch@3.1.2",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/is-binary-path@2.1.0",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/readdirp@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/cliui@7.0.4",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/create-require@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.3.3",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.3.4",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-eql@3.0.1",
      "dependsOn": [
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/diff@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escalade@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-range@7.0.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@5.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@6.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/flat@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@10.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-func-name@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.2.0",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/growl@1.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/he@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@2.1.0",
      "dependsOn": [
        "pkg:npm/binary-extensions@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-obj@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unicode-supported@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@4.1.0",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@6.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@6.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/log-symbols@4.1.0",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/is-unicode-supported@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/loupe@2.3.4",
      "dependsOn": [
        "pkg:npm/get-func-name@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/make-error@1.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@4.2.1",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/mocha@9.2.2",
      "dependsOn": [
        "pkg:npm/@ungap/promise-all-settled@1.1.2",
        "pkg:npm/ansi-colors@4.1.1",
        "pkg:npm/browser-stdout@1.3.1",
        "pkg:npm/chokidar@3.5.3",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/diff@5.0.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/glob@7.2.0",
        "pkg:npm/growl@1.10.5",
        "pkg:npm/he@1.2.0",
        "pkg:npm/js-yaml@4.1.0",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/minimatch@4.2.1",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/nanoid@3.3.1",
        "pkg:npm/serialize-javascript@6.0.0",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/which@2.0.2",
        "pkg:npm/workerpool@6.2.0",
        "pkg:npm/yargs-parser@20.2.4",
        "pkg:npm/yargs-unparser@2.0.0",
        "pkg:npm/yargs@16.2.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/p-limit@3.1.0",
      "dependsOn": [
        "pkg:npm/yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@5.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pathval@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.1.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@3.6.0",
      "dependsOn": [
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serialize-javascript@6.0.0",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@4.2.3",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@8.1.1",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ts-node@10.9.1",
      "dependsOn": [
        "pkg:npm/@cspotcode/source-map-support@0.8.1",
        "pkg:npm/@tsconfig/node10@1.0.9",
        "pkg:npm/@tsconfig/node12@1.0.11",
        "pkg:npm/@tsconfig/node14@1.0.3",
        "pkg:npm/@tsconfig/node16@1.0.3",
        "pkg:npm/acorn-walk@8.2.0",
        "pkg:npm/acorn@8.8.1",
        "pkg:npm/arg@4.1.3",
        "pkg:npm/create-require@1.1.1",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/make-error@1.3.6",
        "pkg:npm/v8-compile-cache-lib@3.0.1",
        "pkg:npm/yn@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/type-detect@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typescript@4.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8-compile-cache-lib@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/workerpool@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@5.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@20.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@20.2.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-unparser@2.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/decamelize@4.0.0",
        "pkg:npm/flat@5.0.2",
        "pkg:npm/is-plain-obj@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@16.2.0",
      "dependsOn": [
        "pkg:npm/cliui@7.0.4",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@20.2.9"
      ]
    },
    {
      "ref": "pkg:npm/yn@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yocto-queue@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flora-colossus@2.0.0",
      "dependsOn": [
        "pkg:npm/@cspotcode/source-map-support@0.8.1",
        "pkg:npm/@jridgewell/resolve-uri@3.1.0",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
        "pkg:npm/@jridgewell/trace-mapping@0.3.9",
        "pkg:npm/@tsconfig/node10@1.0.9",
        "pkg:npm/@tsconfig/node12@1.0.11",
        "pkg:npm/@tsconfig/node14@1.0.3",
        "pkg:npm/@tsconfig/node16@1.0.3",
        "pkg:npm/@types/chai@4.3.3",
        "pkg:npm/@types/debug@4.1.7",
        "pkg:npm/@types/fs-extra@9.0.13",
        "pkg:npm/@types/mocha@10.0.0",
        "pkg:npm/@types/ms@0.7.31",
        "pkg:npm/@types/node@12.20.55",
        "pkg:npm/@types/node@13.7.4",
        "pkg:npm/@ungap/promise-all-settled@1.1.2",
        "pkg:npm/abstract-socket@2.1.0",
        "pkg:npm/acorn-walk@8.2.0",
        "pkg:npm/acorn@8.8.1",
        "pkg:npm/ajv@6.10.0",
        "pkg:npm/ansi-colors@4.1.1",
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/ansi-regex@5.0.1",
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/anymatch@3.1.2",
        "pkg:npm/arg@4.1.3",
        "pkg:npm/argparse@2.0.1",
        "pkg:npm/array-find-index@1.0.2",
        "pkg:npm/asar@1.0.0",
        "pkg:npm/asn1@0.2.4",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/assertion-error@1.1.0",
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/author-regex@1.0.0",
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.8.0",
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/base64-js@1.2.0",
        "pkg:npm/base64-js@1.3.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/bignumber.js@2.4.0",
        "pkg:npm/binary-extensions@2.0.0",
        "pkg:npm/bindings@1.5.0",
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/bmp-js@0.0.3",
        "pkg:npm/brace-expansion@1.1.11",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/browser-stdout@1.3.1",
        "pkg:npm/buffer-alloc-unsafe@1.1.0",
        "pkg:npm/buffer-alloc@1.2.0",
        "pkg:npm/buffer-equal@0.0.1",
        "pkg:npm/buffer-fill@1.0.0",
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/chai@4.3.6",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/check-error@1.0.2",
        "pkg:npm/chokidar@3.5.3",
        "pkg:npm/chromium-pickle-js@0.2.0",
        "pkg:npm/cliui@7.0.4",
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/color-convert@2.0.1",
        "pkg:npm/color-name@1.1.4",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/commander@2.20.0",
        "pkg:npm/compare-version@0.1.2",
        "pkg:npm/concat-map@0.0.1",
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/create-require@1.1.1",
        "pkg:npm/cuint@0.2.2",
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/dbus-next@0.5.1",
        "pkg:npm/dbus-next@0.6.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/debug@3.2.6",
        "pkg:npm/debug@4.1.1",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/decamelize@4.0.0",
        "pkg:npm/deep-eql@3.0.1",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/delayed-stream@1.0.0",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/diff@5.0.0",
        "pkg:npm/dom-walk@0.1.1",
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/electron-download@4.1.1",
        "pkg:npm/electron-notarize@0.0.5",
        "pkg:npm/electron-osx-sign@0.4.11",
        "pkg:npm/electron-packager@13.1.1",
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/env-paths@1.0.0",
        "pkg:npm/error-ex@1.3.2",
        "pkg:npm/es-abstract@1.13.0",
        "pkg:npm/es-to-primitive@1.2.0",
        "pkg:npm/es6-promise@3.3.1",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/exif-parser@0.1.12",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/extract-zip@1.6.7",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/extsprintf@1.4.0",
        "pkg:npm/fast-deep-equal@2.0.1",
        "pkg:npm/fast-json-stable-stringify@2.0.0",
        "pkg:npm/fd-slicer@1.0.1",
        "pkg:npm/file-type@3.9.0",
        "pkg:npm/file-uri-to-path@1.0.0",
        "pkg:npm/fill-range@7.0.1",
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/flat@5.0.2",
        "pkg:npm/flora-colossus@1.0.0",
        "pkg:npm/for-each@0.3.3",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/from@0.1.7",
        "pkg:npm/fs-extra@10.1.0",
        "pkg:npm/fs-extra@4.0.3",
        "pkg:npm/fs-extra@7.0.1",
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/galactus@0.2.1",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/get-func-name@2.0.0",
        "pkg:npm/get-package-info@1.0.0",
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/glob@7.1.4",
        "pkg:npm/glob@7.2.0",
        "pkg:npm/global@4.3.2",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/growl@1.10.5",
        "pkg:npm/har-schema@2.0.0",
        "pkg:npm/har-validator@5.1.3",
        "pkg:npm/has-flag@4.0.0",
        "pkg:npm/has-symbols@1.0.0",
        "pkg:npm/has@1.0.3",
        "pkg:npm/he@1.2.0",
        "pkg:npm/hexy@0.2.11",
        "pkg:npm/hosted-git-info@2.7.1",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/ip-regex@1.0.3",
        "pkg:npm/is-arrayish@0.2.1",
        "pkg:npm/is-binary-path@2.1.0",
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-extglob@2.1.1",
        "pkg:npm/is-finite@1.0.2",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/is-function@1.0.1",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/is-number@7.0.0",
        "pkg:npm/is-plain-obj@2.1.0",
        "pkg:npm/is-regex@1.0.4",
        "pkg:npm/is-symbol@1.0.2",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/is-unicode-supported@0.1.0",
        "pkg:npm/is-utf8@0.2.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/isbinaryfile@3.0.3",
        "pkg:npm/isexe@2.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/jimp@0.2.28",
        "pkg:npm/jpeg-js@0.2.0",
        "pkg:npm/js-yaml@4.1.0",
        "pkg:npm/jsbi@2.0.5",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/load-bmfont@1.4.0",
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/load-json-file@2.0.0",
        "pkg:npm/locate-path@2.0.0",
        "pkg:npm/locate-path@6.0.0",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/long@4.0.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/loupe@2.3.4",
        "pkg:npm/make-error@1.3.6",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/mime-db@1.40.0",
        "pkg:npm/mime-types@2.1.24",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/min-document@2.19.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/minimatch@4.2.1",
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/mocha@9.2.2",
        "pkg:npm/mpris-service@2.1.0",
        "pkg:npm/ms@2.0.0",
        "pkg:npm/ms@2.1.2",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/nan@2.14.0",
        "pkg:npm/nanoid@3.3.1",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/nugget@2.0.1",
        "pkg:npm/number-is-nan@1.0.1",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/object-keys@0.4.0",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/once@1.4.0",
        "pkg:npm/p-limit@1.3.0",
        "pkg:npm/p-limit@3.1.0",
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/p-locate@5.0.0",
        "pkg:npm/p-try@1.0.0",
        "pkg:npm/parse-author@2.0.0",
        "pkg:npm/parse-bmfont-ascii@1.0.6",
        "pkg:npm/parse-bmfont-binary@1.0.6",
        "pkg:npm/parse-bmfont-xml@1.1.4",
        "pkg:npm/parse-headers@2.0.2",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/path-exists@3.0.0",
        "pkg:npm/path-exists@4.0.0",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/path-parse@1.0.6",
        "pkg:npm/path-type@1.1.0",
        "pkg:npm/path-type@2.0.0",
        "pkg:npm/pathval@1.1.1",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/pend@1.2.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/phin@2.9.3",
        "pkg:npm/picomatch@2.2.1",
        "pkg:npm/picomatch@2.3.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/pinkie@2.0.4",
        "pkg:npm/pixelmatch@4.0.2",
        "pkg:npm/plist@2.1.0",
        "pkg:npm/plist@3.0.1",
        "pkg:npm/pngjs@3.4.0",
        "pkg:npm/pretty-bytes@1.0.4",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/process@0.5.2",
        "pkg:npm/progress-stream@1.2.0",
        "pkg:npm/psl@1.1.32",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/punycode@2.1.1",
        "pkg:npm/put@0.0.6",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/randombytes@2.1.0",
        "pkg:npm/rc@1.2.8",
        "pkg:npm/rcedit@1.1.2",
        "pkg:npm/read-chunk@1.0.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/read-pkg-up@2.0.0",
        "pkg:npm/read-pkg@1.1.0",
        "pkg:npm/read-pkg@2.0.0",
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/readdirp@3.6.0",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/repeating@2.0.1",
        "pkg:npm/request@2.88.0",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/resolve@1.11.1",
        "pkg:npm/rimraf@2.6.3",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/sanitize-filename@1.6.1",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/serialize-javascript@6.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/single-line-log@1.1.2",
        "pkg:npm/source-map-support@0.5.12",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/spdx-correct@3.1.0",
        "pkg:npm/spdx-exceptions@2.2.0",
        "pkg:npm/spdx-expression-parse@3.0.0",
        "pkg:npm/spdx-license-ids@3.0.4",
        "pkg:npm/speedometer@0.1.4",
        "pkg:npm/split@0.3.3",
        "pkg:npm/sshpk@1.16.1",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/stream-to-buffer@0.1.0",
        "pkg:npm/stream-to@0.2.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/string.prototype.trim@1.1.2",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/strip-bom@2.0.0",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/strip-indent@1.0.1",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/sumchecker@2.0.2",
        "pkg:npm/supports-color@7.2.0",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/throttleit@0.0.2",
        "pkg:npm/through2@0.2.3",
        "pkg:npm/through@2.3.8",
        "pkg:npm/tinycolor2@1.4.1",
        "pkg:npm/tmp-promise@1.1.0",
        "pkg:npm/tmp@0.1.0",
        "pkg:npm/to-regex-range@5.0.1",
        "pkg:npm/tough-cookie@2.4.3",
        "pkg:npm/trim-newlines@1.0.0",
        "pkg:npm/truncate-utf8-bytes@1.0.2",
        "pkg:npm/ts-node@10.9.1",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/tweetnacl@0.14.5",
        "pkg:npm/type-detect@4.0.8",
        "pkg:npm/typedarray@0.0.6",
        "pkg:npm/typescript@4.8.4",
        "pkg:npm/universalify@0.1.2",
        "pkg:npm/universalify@2.0.0",
        "pkg:npm/uri-js@4.2.2",
        "pkg:npm/url-regex@3.2.0",
        "pkg:npm/utf8-byte-length@1.0.4",
        "pkg:npm/util-deprecate@1.0.2",
        "pkg:npm/uuid@3.3.2",
        "pkg:npm/v8-compile-cache-lib@3.0.1",
        "pkg:npm/validate-npm-package-license@3.0.4",
        "pkg:npm/verror@1.10.0",
        "pkg:npm/which@2.0.2",
        "pkg:npm/workerpool@6.2.0",
        "pkg:npm/wrap-ansi@7.0.0",
        "pkg:npm/wrappy@1.0.2",
        "pkg:npm/xhr@2.5.0",
        "pkg:npm/xml-parse-from-string@1.0.1",
        "pkg:npm/xml2js@0.4.19",
        "pkg:npm/xmlbuilder@8.2.2",
        "pkg:npm/xmlbuilder@9.0.7",
        "pkg:npm/xmldom@0.1.27",
        "pkg:npm/xtend@2.1.2",
        "pkg:npm/xtend@4.0.1",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@13.1.1",
        "pkg:npm/yargs-parser@20.2.4",
        "pkg:npm/yargs-parser@20.2.9",
        "pkg:npm/yargs-unparser@2.0.0",
        "pkg:npm/yargs@16.2.0",
        "pkg:npm/yauzl@2.4.1",
        "pkg:npm/yn@3.1.1",
        "pkg:npm/yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/abstract-socket@2.1.0",
      "dependsOn": [
        "pkg:npm/bindings@1.5.0",
        "pkg:npm/nan@2.14.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.10.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@2.0.1",
        "pkg:npm/fast-json-stable-stringify@2.0.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-find-index@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asar@1.0.0",
      "dependsOn": [
        "pkg:npm/chromium-pickle-js@0.2.0",
        "pkg:npm/commander@2.20.0",
        "pkg:npm/cuint@0.2.2",
        "pkg:npm/glob@7.1.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/tmp-promise@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.4",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/author-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/bignumber.js@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bindings@1.5.0",
      "dependsOn": [
        "pkg:npm/file-uri-to-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bluebird@3.5.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bmp-js@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-alloc@1.2.0",
      "dependsOn": [
        "pkg:npm/buffer-alloc-unsafe@1.1.0",
        "pkg:npm/buffer-fill@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/buffer-equal@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-fill@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@2.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chromium-pickle-js@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compare-version@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cuint@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/currently-unhandled@0.4.1",
      "dependsOn": [
        "pkg:npm/array-find-index@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dbus-next@0.6.1",
      "dependsOn": [
        "pkg:npm/abstract-socket@2.1.0",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/hexy@0.2.11",
        "pkg:npm/jsbi@2.0.5",
        "pkg:npm/long@4.0.0",
        "pkg:npm/put@0.0.6",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/dbus-next@0.5.1",
      "dependsOn": [
        "pkg:npm/abstract-socket@2.1.0",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/hexy@0.2.11",
        "pkg:npm/jsbi@2.0.5",
        "pkg:npm/long@4.0.0",
        "pkg:npm/put@0.0.6",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@3.2.6",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.1.1",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.3",
      "dependsOn": [
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-walk@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/electron-download@4.1.1",
      "dependsOn": [
        "pkg:npm/debug@3.2.6",
        "pkg:npm/env-paths@1.0.0",
        "pkg:npm/fs-extra@4.0.3",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/nugget@2.0.1",
        "pkg:npm/path-exists@3.0.0",
        "pkg:npm/rc@1.2.8",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/sumchecker@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/electron-notarize@0.0.5",
      "dependsOn": [
        "pkg:npm/debug@4.1.1",
        "pkg:npm/fs-extra@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/electron-osx-sign@0.4.11",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/compare-version@0.1.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/isbinaryfile@3.0.3",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/plist@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/electron-packager@13.1.1",
      "dependsOn": [
        "pkg:npm/asar@1.0.0",
        "pkg:npm/debug@4.1.1",
        "pkg:npm/electron-download@4.1.1",
        "pkg:npm/electron-notarize@0.0.5",
        "pkg:npm/electron-osx-sign@0.4.11",
        "pkg:npm/extract-zip@1.6.7",
        "pkg:npm/fs-extra@7.0.1",
        "pkg:npm/galactus@0.2.1",
        "pkg:npm/get-package-info@1.0.0",
        "pkg:npm/parse-author@2.0.0",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/plist@3.0.1",
        "pkg:npm/rcedit@1.1.2",
        "pkg:npm/resolve@1.11.1",
        "pkg:npm/sanitize-filename@1.6.1",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/yargs-parser@13.1.1"
      ]
    },
    {
      "ref": "pkg:npm/env-paths@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.13.0",
      "dependsOn": [
        "pkg:npm/es-to-primitive@1.2.0",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has@1.0.3",
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-regex@1.0.4",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.2.0",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-symbol@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@3.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/event-stream@3.3.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.3.3",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/exif-parser@0.1.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extract-zip@1.6.7",
      "dependsOn": [
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/yauzl@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fd-slicer@1.0.1",
      "dependsOn": [
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/file-type@3.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/file-uri-to-path@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@2.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/flora-colossus@1.0.0",
      "dependsOn": [
        "pkg:npm/debug@3.2.6",
        "pkg:npm/fs-extra@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/for-each@0.3.3",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@2.3.3",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.24"
      ]
    },
    {
      "ref": "pkg:npm/from@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@4.0.3",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@7.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/galactus@0.2.1",
      "dependsOn": [
        "pkg:npm/debug@3.2.6",
        "pkg:npm/flora-colossus@1.0.0",
        "pkg:npm/fs-extra@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/get-package-info@1.0.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/read-pkg-up@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.1.4",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/global@4.3.2",
      "dependsOn": [
        "pkg:npm/min-document@2.19.0",
        "pkg:npm/process@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.3",
      "dependsOn": [
        "pkg:npm/ajv@6.10.0",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/hexy@0.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.16.1"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@2.1.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ip-regex@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-callable@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-finite@1.0.2",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-function@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-regex@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.2",
      "dependsOn": [
        "pkg:npm/has-symbols@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isbinaryfile@3.0.3",
      "dependsOn": [
        "pkg:npm/buffer-alloc@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jimp@0.2.28",
      "dependsOn": [
        "pkg:npm/bignumber.js@2.4.0",
        "pkg:npm/bmp-js@0.0.3",
        "pkg:npm/es6-promise@3.3.1",
        "pkg:npm/exif-parser@0.1.12",
        "pkg:npm/file-type@3.9.0",
        "pkg:npm/jpeg-js@0.2.0",
        "pkg:npm/load-bmfont@1.4.0",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pixelmatch@4.0.2",
        "pkg:npm/pngjs@3.4.0",
        "pkg:npm/read-chunk@1.0.1",
        "pkg:npm/request@2.88.0",
        "pkg:npm/stream-to-buffer@0.1.0",
        "pkg:npm/tinycolor2@1.4.1",
        "pkg:npm/url-regex@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jpeg-js@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsbi@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@4.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/load-bmfont@1.4.0",
      "dependsOn": [
        "pkg:npm/buffer-equal@0.0.1",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/parse-bmfont-ascii@1.0.6",
        "pkg:npm/parse-bmfont-binary@1.0.6",
        "pkg:npm/parse-bmfont-xml@1.1.4",
        "pkg:npm/phin@2.9.3",
        "pkg:npm/xhr@2.5.0",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@2.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@2.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.get@4.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/long@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loud-rejection@1.6.0",
      "dependsOn": [
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/map-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/meow@3.7.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.40.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.24",
      "dependsOn": [
        "pkg:npm/mime-db@1.40.0"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/min-document@2.19.0",
      "dependsOn": [
        "pkg:npm/dom-walk@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/mpris-service@2.1.0",
      "dependsOn": [
        "pkg:npm/dbus-next@0.5.1",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/source-map-support@0.5.12"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.14.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.5.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.7.1",
        "pkg:npm/resolve@1.11.1",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/nugget@2.0.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/pretty-bytes@1.0.4",
        "pkg:npm/progress-stream@1.2.0",
        "pkg:npm/request@2.88.0",
        "pkg:npm/single-line-log@1.1.2",
        "pkg:npm/throttleit@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@1.3.0",
      "dependsOn": [
        "pkg:npm/p-try@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@2.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/p-try@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-author@2.0.0",
      "dependsOn": [
        "pkg:npm/author-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-xml@1.1.4",
      "dependsOn": [
        "pkg:npm/xml-parse-from-string@1.0.1",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/parse-headers@2.0.2",
      "dependsOn": [
        "pkg:npm/for-each@0.3.3",
        "pkg:npm/string.prototype.trim@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-parse@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-type@2.0.0",
      "dependsOn": [
        "pkg:npm/pify@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/pause-stream@0.0.11",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/phin@2.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pixelmatch@4.0.2",
      "dependsOn": [
        "pkg:npm/pngjs@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/plist@2.1.0",
      "dependsOn": [
        "pkg:npm/base64-js@1.2.0",
        "pkg:npm/xmlbuilder@8.2.2",
        "pkg:npm/xmldom@0.1.27"
      ]
    },
    {
      "ref": "pkg:npm/plist@3.0.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.3.0",
        "pkg:npm/xmlbuilder@9.0.7",
        "pkg:npm/xmldom@0.1.27"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-bytes@1.0.4",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/progress-stream@1.2.0",
      "dependsOn": [
        "pkg:npm/speedometer@0.1.4",
        "pkg:npm/through2@0.2.3"
      ]
    },
    {
      "ref": "pkg:npm/psl@1.1.32",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/put@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.8",
      "dependsOn": [
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rcedit@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-chunk@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@2.0.0",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/read-pkg@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@2.0.0",
      "dependsOn": [
        "pkg:npm/load-json-file@2.0.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/path-type@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.14",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/redent@1.0.0",
      "dependsOn": [
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/repeating@2.0.1",
      "dependsOn": [
        "pkg:npm/is-finite@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/request@2.88.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.8.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/har-validator@5.1.3",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.24",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/tough-cookie@2.4.3",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.11.1",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.3",
      "dependsOn": [
        "pkg:npm/glob@7.1.4"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sanitize-filename@1.6.1",
      "dependsOn": [
        "pkg:npm/truncate-utf8-bytes@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/single-line-log@1.1.2",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.12",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-correct@3.1.0",
      "dependsOn": [
        "pkg:npm/spdx-expression-parse@3.0.0",
        "pkg:npm/spdx-license-ids@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.2.0",
        "pkg:npm/spdx-license-ids@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/speedometer@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/split@0.3.3",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.16.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.4",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner@0.0.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/stream-to-buffer@0.1.0",
      "dependsOn": [
        "pkg:npm/stream-to@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/stream-to@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trim@1.1.2",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.13.0",
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-indent@1.0.1",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sumchecker@2.0.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.9"
      ]
    },
    {
      "ref": "pkg:npm/throttleit@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@0.2.3",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/xtend@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinycolor2@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp-promise@1.1.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/tmp@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.1.0",
      "dependsOn": [
        "pkg:npm/rimraf@2.6.3"
      ]
    },
    {
      "ref": "pkg:npm/tough-cookie@2.4.3",
      "dependsOn": [
        "pkg:npm/psl@1.1.32",
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/trim-newlines@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/truncate-utf8-bytes@1.0.2",
      "dependsOn": [
        "pkg:npm/utf8-byte-length@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.2.2",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/url-regex@3.2.0",
      "dependsOn": [
        "pkg:npm/ip-regex@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/utf8-byte-length@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uuid@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "dependsOn": [
        "pkg:npm/spdx-correct@3.1.0",
        "pkg:npm/spdx-expression-parse@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/xhr@2.5.0",
      "dependsOn": [
        "pkg:npm/global@4.3.2",
        "pkg:npm/is-function@1.0.1",
        "pkg:npm/parse-headers@2.0.2",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.4.19",
      "dependsOn": [
        "pkg:npm/sax@1.2.4",
        "pkg:npm/xmlbuilder@9.0.7"
      ]
    },
    {
      "ref": "pkg:npm/xmlbuilder@8.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@9.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmldom@0.1.27",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@2.1.2",
      "dependsOn": [
        "pkg:npm/object-keys@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs-parser@13.1.1",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yauzl@2.4.1",
      "dependsOn": [
        "pkg:npm/fd-slicer@1.0.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/flora-colossus@2.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-12T12:58:45Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, August 12, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'flora-colossus' with version '2.0.0'. The application also has 1 child modules/components. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from the source files: test/fixtures/xml2js/yarn.lock, yarn.lock."
    }
  ]
}