{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:f1989fae-d8d6-411b-abab-7941980d7551",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-04T08:08:16Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "fuzzball",
      "group": "",
      "version": "2.2.6",
      "description": "Fuzzy string matching algorithms and utilities, port of the TheFuzz Python library.",
      "purl": "pkg:npm/fuzzball@2.2.6",
      "bom-ref": "pkg:npm/fuzzball@2.2.6",
      "author": "Nolan Kaplan <nolan@nolankaplan.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "jsdoc2md, build:demo, build:bundles, build, test, test:build, benchmark"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build:demo, build:bundles, build, test:build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "authors": [
            {
              "name": "Nolan Kaplan"
            }
          ],
          "group": "",
          "name": "fuzzball_demo",
          "version": "2.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/fuzzball_demo@2.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/fuzzball_demo@2.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nol13/fuzzball.js.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@alloc\\n@apideck\\n@babel\\n@bcoe\\n@csstools\\n@eslint\\n@eslint-community\\n@humanwhocodes\\n@isaacs\\n@istanbuljs\\n@jest\\n@jridgewell\\n@jsdoc\\n@leichtgewicht\\n@nicolo-ribaudo\\n@nodelib\\n@parcel\\n@pkgjs\\n@pmmmwh\\n@rollup\\n@rtsao\\n@rushstack\\n@sinclair\\n@sinonjs\\n@surma\\n@svgr\\n@tootallnate\\n@types\\n@typescript-eslint\\n@ungap\\n@webassemblyjs\\n@xtuc"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "demo-app/package-lock.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "heap",
      "version": "0.2.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "087e1f10b046932fc8594dd9e6d378afc9d1e5ac"
        }
      ],
      "purl": "pkg:npm/heap@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/heap/-/heap-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/heap@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/heap/-/heap-0.2.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "heap"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "fuzzball.js",
            "line": 5
          },
          {
            "location": "lite/fuzzball_lite.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.18.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74c22789c4cf544f1dd5ee68b5fc269a3971919a14a6254bc32793754b22fc26a3fe07f3cdb941702139b111d5fc0b23b829b15abb5ed93346498b82782abed1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash/orderBy"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "fuzzball.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setimmediate",
      "version": "1.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "290cbb232e306942d7d7ea9b83732ab7856f8285"
        }
      ],
      "purl": "pkg:npm/setimmediate@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setimmediate@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "setimmediate"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "fuzzball.js",
            "line": 23
          },
          {
            "location": "lite/fuzzball_lite.js",
            "line": 14
          },
          {
            "location": "ultra_lite/fuzzball_ultra_lite.js",
            "line": 19
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-commonjs",
      "version": "19.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69d4e90fa01319b7a175a428650ea2a43161763aac4e0a4e0211623f097e773adee293ec86c79ca6d0cfc8415beb524c275fa61a58e4b5a0b88c8f0044c48dcb"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-commonjs@19.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-commonjs/-/plugin-commonjs-19.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-commonjs@19.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-commonjs/-/plugin-commonjs-19.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "2.80.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "708149383d43112ce98ce065efadcaa75007ed413fd1f71d1deeab65751d43d739d2ebe08a0bd6f7bbb721c49e0703a482a2ff3d73c192d042874284bb92fc5d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rollup@2.80.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup/-/rollup-2.80.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup@2.80.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup/-/rollup-2.80.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/rollup"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rollup"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/rollup"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "pluginutils",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a4b19ea9afa4e92231e6f21f65490f298bc044f557ae6cd4f438c277079b9927ca73ef734f8aa3ad0a883fc76fd0cccd4434284f2b130386242e447b2a73e96"
        }
      ],
      "purl": "pkg:npm/%40rollup/pluginutils@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/pluginutils@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "0.0.39",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "118370a776d4fbdf1ca54e250166182fb673fb682bc961f5a9b7434e275577a864891eb07a4b1d6cc69dc9729734f12440585733e8553bd6728289875e9f8023"
        }
      ],
      "purl": "pkg:npm/%40types/estree@0.0.39",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@0.0.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/estree"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@rollup/pluginutils/node_modules/@types/estree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estree-walker",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5f31717760fe29659568cc5f23fd92dfbe747c3522258ede7a5216d9e4f79e0e69861e982977042dec84e51af61a42e902bee05130b1222a2602fa878883872"
        }
      ],
      "purl": "pkg:npm/estree-walker@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estree-walker@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57bfaf404274e99f9ce6d4b27bc4be9c751f239d71a172178c743df5c42d294910aaa3b590efca08951f657b81e3b87f60194385a8761f785d5065e7f227b4a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddd800da0c66127393cca5950ea968a3aaf1253b"
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estree-walker",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45f924fcca7f0cbec95637b7bb5f05c45ba34254cd476aba41f312301ec0bc2071f753468ff6dade409fcdad1fe9d5436f0ed89517ff9c3ae7ee942b082c90ff"
        }
      ],
      "purl": "pkg:npm/estree-walker@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estree-walker@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f06b1c3267bd8b93bbd920db4d36bcb05f466e2f24adadd0ed69b79f64a018e59189855b607739e5b917acc4d98f8ad1344803be3b6eac5931de292236c0c04"
        }
      ],
      "purl": "pkg:npm/glob@7.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Glob versions prior to v9 are no longer supported"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        },
        {
          "alg": "SHA-512",
          "content": "c74d0844d5cdcbade3c069099b33e2828c921db6aaa4dbb329b04e9b32be83639d66943dc3eb3108df95481de36bb20081ed8e3f6aa97f14e378d7328e65b5bb"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5608d652c9e74fa9fe35493a799abbef37857695b62d60f33facc51ab09b1d789836e9790f3aa4d871d0e6e147d83356e576e9f3e8d5cda78db7de2cb04125e3"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f592e9ad64ba1043668443a98c2616d9cf159263af72420965f92beeb056e9d39b99f809fcbd46a52616e47a68f650f3e03d7e9f40a4cfcad4ec5c070d0886ff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-reference",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53cd8cb175e2148ae308ae28b4b4fea36340d8277683930ba0e5575198c83a12eeaeb471a445f323c3b42991ebdc88cbbe5007d644cf612baa7abe53f5954129"
        }
      ],
      "purl": "pkg:npm/is-reference@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-reference/-/is-reference-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-reference@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-reference/-/is-reference-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "magic-string",
      "version": "0.25.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e02acc4f90ce1d30e4e076039739b0bb815509c21823c81abaf79ab2b742bb620a205389ddfd2fffc3031890832fda03da9a73fc0bf56f4363df8e47f4cf9720"
        }
      ],
      "purl": "pkg:npm/magic-string@0.25.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/magic-string/-/magic-string-0.25.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/magic-string@0.25.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/magic-string/-/magic-string-0.25.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sourcemap-codec",
      "version": "1.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4dca4a23579522878960a394a8e5db70f9fd098095f7d0a08d23c830873d89f40d79c03d0c97ab631cac1fe9f4d26ba7c075505d65e34eb3d789ef5a8293cbc"
        }
      ],
      "purl": "pkg:npm/sourcemap-codec@1.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sourcemap-codec@1.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please use @jridgewell/sourcemap-codec instead"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c043413ede324b3838c9b1505b64d3d73310b9c3caf791d287f9ead82153655386baddbea50bd2b20b5d6b8776e98ad872bd3aef08db9b3386f1bc833c15fadc"
        }
      ],
      "purl": "pkg:npm/resolve@1.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bddd79a87b1aaab44beddb47e9036ecb49dd266443ad2f4700cd420224a27cd505bf8c756b408256c8f5f21275992871206e93da2d6c3bbf0c90fe7aaf49d847"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-node-resolve",
      "version": "13.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e355f8d751c9de88a42038af4f938a7bd119eae77a0d7b9db5f36b19b0b89e789ac71d9eb225a390b3b382766c5aad4833c60878bdabcd118b64b0639619d9b5"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-node-resolve@13.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-node-resolve/-/plugin-node-resolve-13.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-node-resolve@13.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-node-resolve/-/plugin-node-resolve-13.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "resolve",
      "version": "1.17.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb2ec7bb34218f47611a90fc44b5d26561242ec57d89bbf1be2e84889ddb92a2c03b5446a3459b916422c29465485ca64c9473d1dde4e4b337924c7c02b0db2f"
        }
      ],
      "purl": "pkg:npm/%40types/resolve@1.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/resolve/-/resolve-1.17.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/resolve@1.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/resolve/-/resolve-1.17.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/resolve"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "15.12.5",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1edf25fb507bf906c71ff1fd4444abd0383eac4f2c9c1f785d6a8a33bda2f1814898e6520611e1f7ec00f41b4422f643ea8a13e7d0739f776c9a20437d57012"
        }
      ],
      "purl": "pkg:npm/%40types/node@15.12.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-15.12.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@15.12.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-15.12.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "946ccb29c8a82fdd02ef031cce9918d27fe80114f731b05af11f4e146135ac9c68548f3abb858019f124f168efd7478a4b24c7546912a376ef07294212d93b2c"
        }
      ],
      "purl": "pkg:npm/builtin-modules@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deepmerge",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "149dd4808e20225f8f1d99b9de49ecb9216913e9c448cafb338bfd41c801ed2eb72a3ffa5aa322150269041633d4fb7eeba6d9a4fdd0ecbc9ed0ea3d30f28476"
        }
      ],
      "purl": "pkg:npm/deepmerge@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deepmerge@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3258fb69f78c14d5b815d664336b4cffb6441591"
        },
        {
          "alg": "SHA-512",
          "content": "e75ca93d23c2a1310837d772e4ecbe878a528602663c2ca029fc9108848123e268593ff6a09bcaf103f19b0bfb6ffa76dfd8d7ae6f4cd669506f2289e40d79da"
        }
      ],
      "purl": "pkg:npm/is-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cached-path-relative",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "585d0b8a17de9ad7ac15c2603bbc5f3a839c9d6cd8fd01d1e2a783a95e388cf5371d3239e3e2e77d72b7480dbb01554609d6458238c515aa9403d271edd30964"
        }
      ],
      "purl": "pkg:npm/cached-path-relative@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cached-path-relative/-/cached-path-relative-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cached-path-relative@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cached-path-relative/-/cached-path-relative-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cde15ecf0c97786e2ccb26076ef87503debb200aaaffaef25ed5efb8be709ea0a41597bc234bca7e6f843be604bcb82ea3ac3d08351bac05d5b4948787613caf"
        }
      ],
      "purl": "pkg:npm/jsdoc@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc/-/jsdoc-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc/-/jsdoc-4.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsdoc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsdoc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "parser",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9a411db3184fd0162f09a432e351910f60eb3bfa684a5e6f3a55a28588b3f7e4943041be9bc1413e5dbbe41f4129b6c6216cd05250669404b2aac47d714a0b0"
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/parser/-/parser-7.26.10.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jsdoc/node_modules/.bin/parser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "parser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "types",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a6a9c1b7bc7ae9c54293af171b951dfa75cadca110ef2a69cbfdd08be99b07692856f34ab108070d873419ae978cefae55cc4a2cfb13a2e2cfabe085f34f075"
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/types/-/types-7.26.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-string-parser",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e00fd20abff628b7798ebb4e305cda2a356d01e8b7fb6aff34286804da19dc4c8fffe1a58686841a858e6549859a82133fbcce2721c8326f8361177ca373ef1c"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-string-parser@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.25.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11deb553a5c973709545f904449583cf8749c0a7bb88b9a626c6ce1aef704a5a0d485b6d1d5d08f20e940206fbaa72b9972e5b18b3dde285d997109d00d04e59"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.25.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jsdoc",
      "name": "salty",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c98c4c547ec3ab0ea73b477934857c3905a78ad53c93abd71fc36d82a01f21afc852a44cc51bff354249d3c54429b01a930c658019793c976b53474c3d2b6c9f"
        }
      ],
      "purl": "pkg:npm/%40jsdoc/salty@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jsdoc/salty/-/salty-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jsdoc/salty@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jsdoc/salty/-/salty-0.2.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "markdown-it",
      "version": "14.1.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6ba26a38785c2e896f937c6c618bed31ddccea4d82641bca81d7b654262545d745e6ecd2d54522d4b1f45353fea1d5edb856f4675c2c7e846ee58b9f25933a2"
        }
      ],
      "purl": "pkg:npm/%40types/markdown-it@14.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-14.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/markdown-it@14.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-14.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/markdown-it"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "linkify-it",
      "version": "5.0.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b150c0e7ccc0c3879601f7ca39a407e7fe63dd779acae9330e4f9ec12b27bf7a78c891191c20b330389933c7b4394ad1be6a4667ce637f8c831e41ec80136bf5"
        }
      ],
      "purl": "pkg:npm/%40types/linkify-it@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/linkify-it@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-5.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/linkify-it"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mdurl",
      "version": "2.0.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4467608d05196dae69e90105015c763866fcad00cbfdc3d11bb1a279d47331c275b589d400d0677236d20753511b06ef8dc3de8a4440073da7b21c8f9356e15a"
        }
      ],
      "purl": "pkg:npm/%40types/mdurl@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mdurl/-/mdurl-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mdurl@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mdurl/-/mdurl-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mdurl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e9363e860d0cdd7d6fabd969e7ef189201ded33378f39311970464ed58ab925efd71515f9acf1026f2375664dd3a413424fb63765c1f6344392f6e6426711b6"
        }
      ],
      "purl": "pkg:npm/bluebird@3.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "catharsis",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6b313415a5c9ecfedcc5805564569e9a93a472919c966f782ef1c914a5de9891395a70e7770d71898c8a43e10eb3262ae2cef6a20234921e53ac03eeac361d8"
        }
      ],
      "purl": "pkg:npm/catharsis@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/catharsis/-/catharsis-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/catharsis@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/catharsis/-/catharsis-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "529cdc2c25e895459c36ee47b5530761d5c98c0ae3b05f42d1a367aae658638b96fd5bb49a2cb96285af6d5df8e476ae56f700527a51ba130c72a4dc18e636fb"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js2xmlparser",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea7e03f202e52dfd67e6634b40f45f562633bbd4404db9733c4b66d52b61317d4f8daa34afd608f67c3b6487d1c50304452f3b99cb30ae0fabfce62b3d15fa8c"
        }
      ],
      "purl": "pkg:npm/js2xmlparser@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js2xmlparser/-/js2xmlparser-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js2xmlparser@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js2xmlparser/-/js2xmlparser-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "xmlcreate",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9eab8e79b1b8b2780f9863c80934b9127c6a84a6c29b3e4ec7986cb332364fa539a9dac98b305cfb48a56121234d2cd4d3265c9afa69ced5deff9025e5f53076"
        }
      ],
      "purl": "pkg:npm/xmlcreate@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlcreate/-/xmlcreate-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlcreate@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlcreate/-/xmlcreate-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "klaw",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d05a39a22afe3bd8e75eee4479f61b54afa61cc05e115132d9c99cb51d4ed4d10270290f46b7892ab4ba42dfe3dca0b60b5e3c0dfa3d8b7a4298232c76a1abd2"
        }
      ],
      "purl": "pkg:npm/klaw@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/klaw/-/klaw-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/klaw@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/klaw/-/klaw-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7d151019b83c4771d5d441ecc14aec17a37a3bc2bc1ae89db2e386dfac1ee1988fc3c7b3b33fe59fabb79970e79d6f67bc9f4c28f856ecb2de6489cad0d645"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "markdown-it",
      "version": "14.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06e536aa74ed8bd60a80ae4df8878cb9ba75e1950a514c3bc9e25b923b68b2f1e23f4019e5cf0802010c93bf43d1e0bc176debe0073fabc700205766d85b72a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/markdown-it@14.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/markdown-it@14.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/markdown-it"
        },
        {
          "name": "cdx:npm:bin",
          "value": "markdown-it"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5748631f87463e1f40a39a74328458e8156ab700a3873eaf2392d3f00279e47fb883dff8bdb1f1d48e787d2d17b9c94b8431c0acf40288c8c3c6368bf1f3f187"
        }
      ],
      "purl": "pkg:npm/entities@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "linkify-it",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5a1c26f341100371d3fe013aa70ee86127f31122a0e4657e69ca3147451cac4bcbd9e406ea184a0521bea96073d9f8bfce0b62dcfb14fcb875554790802bfc1"
        }
      ],
      "purl": "pkg:npm/linkify-it@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/linkify-it@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uc.micro",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0110c99a986676f524e86970ef2f434366c590a047c101cb8b696c687e8f3e6cff29af6c14e06c065ba8ce10e5b569a7bfdbbf705e91b7cef39d14cf57eca9fc"
        }
      ],
      "purl": "pkg:npm/uc.micro@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uc.micro@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mdurl",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2dffbdfb6afe4dda79c170d70b83dc2018d30edab850a8c23cc421288bb3a49356d1bf7a915a92c16d1b4fb1614527e602215880ff92091bddac3a337e1d14e7"
        }
      ],
      "purl": "pkg:npm/mdurl@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mdurl@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode.js",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb11481d4d189476210d0b55e11f49e9ae7648bc76f010a34fee227a1ec819b83054958efa49b8df5738c9195111402c026b7fb8c8d05324073443dfd0cdfd08"
        }
      ],
      "purl": "pkg:npm/punycode.js@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode.js@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "markdown-it-anchor",
      "version": "8.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "165087170367bad2e05537e53981cf5b6a4f725d80002a95cc4c6590640db22e02260a8e1cded84e00dde0bba180dd4114edd34b4bcb02bb95d5377a77058f24"
        }
      ],
      "purl": "pkg:npm/markdown-it-anchor@8.6.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/markdown-it-anchor/-/markdown-it-anchor-8.6.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/markdown-it-anchor@8.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/markdown-it-anchor/-/markdown-it-anchor-8.6.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d1b1a886f386caf8032fc73884fe5085b2cf23b978cd696cd56cde6d5c09b85e379a4bd3401e1a29f8f8d0c73d80f61f10e0cff11a6ccff2fa8dc32e8978ad0"
        }
      ],
      "purl": "pkg:npm/marked@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-4.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/marked"
        },
        {
          "name": "cdx:npm:bin",
          "value": "marked"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf"
        }
      ],
      "purl": "pkg:npm/mkdirp@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jsdoc/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requizzle",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61a9e8c898f290fc461e28b47d93f4b943c45e9bea7c10f1595eece862808a23ac8aa857eaf1cdc96dd0cdd9aaa7f8aafc4c5b85a19b56b8c1e2bb8455233819"
        }
      ],
      "purl": "pkg:npm/requizzle@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requizzle/-/requizzle-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requizzle@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requizzle/-/requizzle-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9f3dcf91e22870a8fe8dfda22fd9fd60307f25395b56407a2a0b8c8aea8483555a1cba602c7c2aa39179ea89832198cc12fe61072e9ed57a196ddea97a9448a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.13.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7b43dd9b4443373b33c9b8717a2dc8747e1404b5f02eb86ac058639bea65ec5f62bc8d3670dcd365b884a837add42ea8e61ab358e4b1e5f4fa76578d35e7bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/underscore@1.13.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.13.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc-to-markdown",
      "version": "9.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42a6154a8e7c8875e90f92708b5bb80057ae31c429e237e4ed2996cef5ca7377eb33d2a8a75eff387b9d9a2d29873913fcad77ed196ba1cf50d32fbde57a54b3"
        }
      ],
      "purl": "pkg:npm/jsdoc-to-markdown@9.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc-to-markdown/-/jsdoc-to-markdown-9.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc-to-markdown@9.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc-to-markdown/-/jsdoc-to-markdown-9.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsdoc2md"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsdoc2md"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-back",
      "version": "6.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "814019ec73f26f84897335c03145cc180bc8f7be89a0adea131f6fd454e6798b898f420189a2adb46d7276d18a7647ea5a4224a2e91eee71bcb9f1b2efbf82bf"
        }
      ],
      "purl": "pkg:npm/array-back@6.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-back/-/array-back-6.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-back@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-back/-/array-back-6.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "command-line-args",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26bdde072523ab22b4a9df16d121855b59d9c2a09a342b5b5e3468d9c4490b5398c56977319e6dd544b78eaf9c3b8b0f6afaa0c3897d04c197d0205efadadea6"
        }
      ],
      "purl": "pkg:npm/command-line-args@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/command-line-args/-/command-line-args-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/command-line-args@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/command-line-args/-/command-line-args-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-replace",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "638e410221379b3d90b2b3767dbe5012d3b8a9be3835c4bb7a7ff4cbd3c456c837e751ec2de55c94ff103cc1fbf4b7bdb07debb39452c09bbdf56d163d93b8dd"
        }
      ],
      "purl": "pkg:npm/find-replace@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-replace/-/find-replace-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-replace@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-replace/-/find-replace-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.camelcase",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f0b849c29f16dcdeb02f85ffcb6c6eed2540f386a5f2167bf776dccb38f8021bf84e0cbed6167b1bc24b640fbc9457446bade3ff9753c02eafd84a0e95be394"
        }
      ],
      "purl": "pkg:npm/lodash.camelcase@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.camelcase@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typical",
      "version": "7.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9ae2683fdf4be6f833967c183860ade3d960fa4d6b519026dab0e26be340ac79810dcc251bcbfeeb22f5c0f7d246b101de3712db9d77722cbc4a4afded6ae17"
        }
      ],
      "purl": "pkg:npm/typical@7.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typical/-/typical-7.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typical@7.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typical/-/typical-7.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "command-line-usage",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ea30bcb9f981b084c875c12d389951b8e28a83b20c8b45228905d3a8d5b9d884c2815bae60645d5d469d8e6518624e38141e58f2f7daa43bb6ec72d2dac37e5"
        }
      ],
      "purl": "pkg:npm/command-line-usage@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/command-line-usage/-/command-line-usage-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/command-line-usage@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/command-line-usage/-/command-line-usage-7.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk-template",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe086b82685f63c45a49d7a8e3784d5f1a681c0b7175bb245078cfa5fa94586b6d160c9c52160f1b1dd86410a7502bce6bb0e88af9f521979cdc31061683202e"
        }
      ],
      "purl": "pkg:npm/chalk-template@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk-template/-/chalk-template-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk-template@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk-template/-/chalk-template-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898"
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "table-layout",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88ae7f621671ab918ee73f306f46d8d77d7bb83177663a616b440514b03cfedac0a222db403d0751b31eb046b1cb35200f18b642571b33c22fa8e9448e0a1704"
        }
      ],
      "purl": "pkg:npm/table-layout@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/table-layout/-/table-layout-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table-layout@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/table-layout/-/table-layout-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrapjs",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24d8dc50b5367b8289c1436fe821e0238e94bc31a2b5be9d1abc876a35d30e22e0835fd1886a0f483c389197d89f01ad1177f664c7887b00d08051b39020764a"
        }
      ],
      "purl": "pkg:npm/wordwrapjs@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrapjs/-/wordwrapjs-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrapjs@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrapjs/-/wordwrapjs-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "config-master",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fb2c12f5cc1cd8753a45d66c790cd7199d99f4e4258876c76fb4f2f8328b2fa9b0542b746ae95584b4652e177634b3dfc222131e8decea95290fe939c227ff6"
        }
      ],
      "purl": "pkg:npm/config-master@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/config-master/-/config-master-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/config-master@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/config-master/-/config-master-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walk-back",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35be86bc147c5165f50fe2defb152ad3e435905991048595adf2e74003a672913303da00c7027d808af7eadf535987f3bd646fb8cb631e256c2581245d669301"
        }
      ],
      "purl": "pkg:npm/walk-back@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walk-back/-/walk-back-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk-back@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walk-back/-/walk-back-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dmd",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "029d873fa8ae39e93b7928517832ebf6396e3499bd44c6444a5b76f47fd7b35aab54c91c4bd5fa9b98759810b9e963313624a8d30be31880a66656144858f065"
        }
      ],
      "purl": "pkg:npm/dmd@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dmd/-/dmd-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dmd@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dmd/-/dmd-7.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cache-point",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ad4c830b10a6e1e83c390ebb976f10207322e787fa0f1952c17d33ea04e7ed012c477bc6c0797cbb2643b81742ef1ea86ded7a8fe4eff4f61e547074b6c3414"
        }
      ],
      "purl": "pkg:npm/cache-point@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cache-point/-/cache-point-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-point@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cache-point/-/cache-point-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "common-sequence",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83f0a049893ddf2f9ad482a6e74b4a97b91a4ff3a38d361542511b525b7fe3d64b57599c2a9514ee2c838aa4c078b75be100ed41fab76a4a3ccbcbfffdfceb59"
        }
      ],
      "purl": "pkg:npm/common-sequence@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/common-sequence/-/common-sequence-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/common-sequence@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/common-sequence/-/common-sequence-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-set",
      "version": "5.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fca80923557f41a0cae1e9ce93f136c4c164d5c4d6260844afb5265a24597d9eaea6dea04027cc9f88c9eda3a6eb838abab8f84da5674928120eabf964a600dc"
        }
      ],
      "purl": "pkg:npm/file-set@5.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-set/-/file-set-5.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-set@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-set/-/file-set-5.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-glob",
      "version": "3.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecca6d2fc53472a705773233c0e4c7a22957f71e41acdab27bb67f2ee0bb9023118a8d44312caa44adc1100503eec5d1ab8893e00cd356e65d8604364c2bd82e"
        }
      ],
      "purl": "pkg:npm/fast-glob@3.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-glob@3.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46484f3e9db3aea0c0400ff68cd867ced70f025bfae17761229edaef8e78039a2f23b06e93182decc5fbb9dc00bb7ce0d437293d4d2bcf7555d5279aaaf638f8"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.walk",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0607e53196059c810920c28f067041b07a6a1316ddc520ef5a6da6c199a1b05c8a01299f864f2d293f5f396de1a0ecb96287f3521d25765c0b35967ce7a1c4a"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.scandir",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-parallel",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e65e15c9947ce8b67f943c594d1ea3a8bf00144d92d0814b30fdba01b8ec2d5003c4776107f734194b07fb2dfd51f0a2dddcf3f0e950b8f9a768938ca031d004"
        }
      ],
      "purl": "pkg:npm/run-parallel@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "queue-microtask",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e68d49ae9f94a4f925a498433268934e09cd32f5080e9a1a1bf9adf2d6dcf82a03e3360a1a59427002f21f22e19164052f17e51aa40c11c0eebe217a3dcaf4"
        }
      ],
      "purl": "pkg:npm/queue-microtask@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/queue-microtask@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastq",
      "version": "1.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b02d3cb19025e35dbc6a2214ec308d8dba2f21b8c3ed9f183b92b6a33c90239c41bf8a2392ee2fb30ad586651f46d0d04a6d72a1e97f66f5422c617fcdeafbd"
        }
      ],
      "purl": "pkg:npm/fastq@1.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastq@1.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reusify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83a4147dfd38a19a47b34786e69f37ac52e11de574d2e83f61ff6764ce9f2de52b3e0b814e44d039da40596b29321e794d97d54033da37735025f6d5440c5d23"
        }
      ],
      "purl": "pkg:npm/reusify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reusify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3"
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a"
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        },
        {
          "alg": "SHA-512",
          "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge2",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a"
        }
      ],
      "purl": "pkg:npm/merge2@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge2@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d7c1f06162ed210423f0f039f413e58361beda7f77522d558a8b71c6bfce08745e13c85a02d32b3115dd06a31c3b9d2bf84ff3f3109431b18b0488508aa3604"
        }
      ],
      "purl": "pkg:npm/micromatch@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c906d780efce499543d88b222e5ae8fbb1dfe90d7c109aca484b1da0ccca78f29772dde0bc3f282dc390748cc6ba9af9163f840def203bf9717350737cca71bc"
        }
      ],
      "purl": "pkg:npm/braces@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62c1a97b75872caf19622e2d583836272dde6d1cf6ad7a300f19e57786e4401d3471cff5670f405a70b48bdced0c98ad8afb50bda23d29a2f22ab73e8415b4ca"
        }
      ],
      "purl": "pkg:npm/fill-range@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "4.7.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e04ef5134ae939a42e251d80df10d9f863351f2598bf5725479f2d0bc7a640d7907b7447ecc03349b6adf95d301bbf0b401a3a9ba6f3486fcbe2906e0ac82751"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.7.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.7.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/handlebars"
        },
        {
          "name": "cdx:npm:bin",
          "value": "handlebars"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb"
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82f57324594fc9c29ce5d64de323e43fcc3b0dcdfb06d3f5c9ccc49de39be2eab7e295d972faed45399657c5be5267be5c2c4a81b8ccfa77af93214f3326dde1"
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "3.12.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7de67347e90871256e2e2decff4c746f64f1e08a24c2ab7ef0f24cef24472ae95d83830b75a9b84c215e202bfe9600edb98882b5d9abb483feb8df4b5af0dab3"
        }
      ],
      "purl": "pkg:npm/uglify-js@3.12.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.12.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.12.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.12.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walk-back",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bf1512c355d650585ac0cd4e8776fa66ec3ee6da29daf37de020a2e9b50ca444ae3d9a60981cb1eaed4aa33c36f16ca2d9913916d6b16a6de9e0744dec2df77"
        }
      ],
      "purl": "pkg:npm/walk-back@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walk-back/-/walk-back-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk-back@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walk-back/-/walk-back-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc-api",
      "version": "9.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "762f258202c0084b6da72019e968ca29a7d43f8c02e29ac01a3b78d27325eeab83a69da70fb1a62edebf5b1851bbd43a218a000324ac35e89d05761500cc25aa"
        }
      ],
      "purl": "pkg:npm/jsdoc-api@9.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc-api/-/jsdoc-api-9.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc-api@9.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc-api/-/jsdoc-api-9.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "current-module-paths",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f8b386ab70bc7fba06eed57924812bdc5196b1d0bead5d4aa7a691a78906fc97956350a187a1ac97139462ae288f8580ddfa48d99daa24d548a0d773cab4a61"
        }
      ],
      "purl": "pkg:npm/current-module-paths@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/current-module-paths/-/current-module-paths-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/current-module-paths@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/current-module-paths/-/current-module-paths-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-to-spawn-args",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85b8a150dfd70e203f81319dd06a985c0bc638730e8b5c12f22203d4f8e848630be225a98f027fb89884daa6748142b7a307e34da7e14cb24843f02abe62cdf"
        }
      ],
      "purl": "pkg:npm/object-to-spawn-args@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-to-spawn-args/-/object-to-spawn-args-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-to-spawn-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-to-spawn-args/-/object-to-spawn-args-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc-parse",
      "version": "6.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31003e9427b78a865dd2e19bc81de70c20d970a80a0bb9bf22fb742e0299754a0e94c271516250dd623a19ec87a7da2ece729a0a3969ec253db30e64e3ac994f"
        }
      ],
      "purl": "pkg:npm/jsdoc-parse@6.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc-parse/-/jsdoc-parse-6.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc-parse@6.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc-parse/-/jsdoc-parse-6.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.omit",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dea92a78f613469a5923d842657eb40523343a95774dae8f6c75db50cdc258f106a80b618ed034fbc5a2289077b233e9884f498f3253ef918ce0db10ae1dd66"
        }
      ],
      "purl": "pkg:npm/lodash.omit@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.omit/-/lodash.omit-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.omit@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.omit/-/lodash.omit-4.5.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is deprecated. Use destructuring assignment syntax instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sort-array",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a0f4ccda8d21a9adc4ab308c6c5f2353d1ed09078ed12517c9b290beedca3867905d36c365f0599623e957129c8aabebe4306ea91e0021ab208ef9b9034df15"
        }
      ],
      "purl": "pkg:npm/sort-array@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sort-array/-/sort-array-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sort-array@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sort-array/-/sort-array-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "11.7.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9934fa460a29118001cd7585c7e19c27e650df6929e1f31fd31be964821f4aaf59f250bffbe32d7029d0f6de453f6bde6043fde452184af5be53d7d5e31ae58a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mocha@11.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-11.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@11.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-11.7.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha"
        },
        {
          "name": "cdx:npm:bin",
          "value": "_mocha, mocha"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983"
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "420ceef247c1be8f9c038f7ada39cfd4a912e83a29e4d4ba83b4792c5609af86fc51bf783cf417524b02c3d3ef5e87973d145d751342e42d4941447648c1ad9c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18387090b7f2c162f6b3abc48f286b8be79799f1fa8f52fb244dbb5a1a8b798ce887f0370c16981848f61ff1c56429ff90c7e29bbdc55f11094f0d3a5adc50c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readdirp@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e964d9fc8c4263f4fa0402e8647684e1cb69f719be679918fe9cd86821d115ec958688f196b9bee3acbaf0703a86bd1373012cb28c4d8831142508df3d9fd160"
        }
      ],
      "purl": "pkg:npm/debug@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c958751bd5115ebca0b068503d4651b9b4277e14ee62461f40f0712d926047d8b8b4de226b881ea6e8920de2b1b3dcadc92dac08effbde035c7344a3fa21207"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-7.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4eda5c349dd7033c771aaf2c591cc96956a346cd2e57103660091d6f58e6d9890fcf81ba7a05050320379f9bed10865e7cf93959ae145db2ae4b97ca90959d80"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efcfcf5d3d7094b2c3813cc3b3bb23abd873cf4bd70fece7fbbc32a447b87d74310a6766a9f1ac10f4319a2092408dda8c557dd5b552b2f36dac94625ba9c69e"
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f64ae9e6236f146edee078fd667712c10830914ca80a28a65dd1fb3baad148dc026fcc3ba282c1e0e03df3f77a54f3b6828fdcab67547c539f63470520d553"
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2da363b51594058fbecc1e6713f37071aa0cca548f93e4be647341d53cdd6cc24c9f2e9dca7a401aded7fed97f418ab74c8784ea7c47a696e8d8b1b29ab1b93f"
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d839a9ccdf01b0346b193767154d83c0af0e39e319d78f9aa6585d5b12801ce3e714fe897b19587ba1d7af8e9d4534776e1dcdca64c70576ec54e5773ab8945"
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad592cbec9cd09d27fa2119ceb180fc3237c7a1782c6c88b33c9b1b84fedfe6395a897b03ee3b59a22e94c74224604ca08b7b12f831e00555a82db3b1e6359d9"
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "10.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0df5cdf037e127b347dce7bb7059aedcd0aed7029b911789f13a2bcd20056d22ab94d69048a7c8cea62a558f3395bb3634b05b5a9462539d865f63db68154d92"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@10.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@10.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/mocha/node_modules/.bin/glob"
        },
        {
          "name": "cdx:npm:bin",
          "value": "glob"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/sucrase/node_modules/.bin/glob"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreground-child",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8085e32aab45b96120cc544903d58241e4892d90e380950e302333c6dbc5abfdfb2a88ccd41146b9faac0b2d2be2a4909982ec65831ec91ab321638cba9d37b3"
        }
      ],
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/node-which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/node-which"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f3c99d5ef3cc3d3b588d25b2a73a5bd84eb58f0e5e3a3b56c6d03dd7227bfef6d90faf1acdf235144e21650e4926296827d4ce827c8035dd2b86a8e6bd2a8af"
        }
      ],
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jackspeak",
      "version": "3.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "386959429cf6c9f6a103f45dd58f0277d48812caaf5e42d5a12c3f720c219e114c0dbb1015e658a0927b6c86414bd05c6a6516f7a6acabf9e93d6ba033e45007"
        }
      ],
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@isaacs",
      "name": "cliui",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bc8dc8da6d76a578e1bd0d0d3e0115d66414df9cfe16340ab3ba224aee5978e009b118abff2763384cf8f18d8df39c109fbc15c5cee726d6dc1dc85c9b16a10"
        }
      ],
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e72ce091def8dc63c6dea0d2ed723679fe7c67d9a7e6304ea586b0eb79ba24a8c6a9f976de5bc9fd4d7a4f0cea9d18ae6a708de84f418a4d6eb00bb10c895a8"
        }
      ],
      "purl": "pkg:npm/string-width@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23cf1361959cf578981d1438ff7739ae38df8248e12f25b696e18885e18445b350e8e63bc93c9b6a74a90d765af32ed550ff589837186be7b2ab871aee22ea58"
        }
      ],
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "9.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f5f03689b17494936fb8da9bfc98bb398c94f686a164144e23db5c0e9a06d4aac67684bef636c514efce60f515e0a37b3464d815978d93887a7766d3affd5ca"
        }
      ],
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8aae9e55523ae274104d162ad8ab44836776b94ecb125853270b07e18cc81d9b21c658199acff021ce15a03413946fc8bd522b04a1b4e82ad99e9d2abfb86471"
        }
      ],
      "purl": "pkg:npm/strip-ansi@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec7497e1041be02b297222e9545c3245eefd3b7c6c2190c32c4476d6411143bd6868fa1d17c8cbef6e408093050186e8a08aa8949a112ee33cd52a5e524a64bc"
        }
      ],
      "purl": "pkg:npm/ansi-regex@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b22ed0588eb350cab9e9b11216f6a0b66ccc7463ada317d1f927b3d753286df73bb66f9591472493d6d6d9479f7d319551b3a4b31992c34000da0b3c83bd4d09"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6cdefdf2015f417faf8b0dd1ef2ac6591aa7acdda84641245238e5e09367e04f06c716e3b46dc56eb108218de5f3f86bc14c0878266f8b842e3933f8304ad5ba"
        }
      ],
      "purl": "pkg:npm/ansi-styles@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@pkgjs",
      "name": "parseargs",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb55648dd0f44012cfa1d1ab2547aa6ab1fc54022f40e0c86f087d5e93f94b28ac7fb628420b0928f345a2aa8b425bbe550fed552b21311ea5a0f327f14f9d3e"
        }
      ],
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "9.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "381c0137d00be1daa61139694b6cdab31faf4de59c956ce46e57d993b2930398f78de38e373fed4429d9a26532bcd83cdf02f966ff52b3a1cc2570202fc47662"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@9.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@9.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30257f7d82446eac7af1a139f24bf6700fe48a4cb51bcbeec77391ebf8db4be8c831effa7c959ad034f3254eddaa28ce598c078b5b76f4595f608f6ecadaa5a4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e3b34b57014d6605e011fc7d578f0c138ef62a6d327194119c0d73f70c5a74d5da754b67b56835610f1e461ccd9034a5da00edd97a7bb14beb9f675fd4b66b"
        }
      ],
      "purl": "pkg:npm/minipass@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5046484b7fdbcb8382f2f2f73f67535d1113a5e6cb236362239bc8ae3683ff952dae4157fed35bc234d2440182ffeec2028da921c05a4605a670104772c68223"
        }
      ],
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-scurry",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dae0dc35ec54bd02940527dba62e2252e28ac68e6ed9cf052bc1a99c190b874b30f2b61f5ba0a0dac9c61d0dc643baa6004d7c381c55e06aa59372d5bfbf51c"
        }
      ],
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "10.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24d03365c5eb0ade365462ee633d337c0cc37c0bc9596e807d8943050c835790c2948da6e6c0262be3883bbb39f577ec46c587a74da3009ad169d3d1193b7a49"
        }
      ],
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@10.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17fd439d418fa29391662d278be0afac28074391721001d12d2029b9858c9ab6d2c28376327ffb93e1a5dfc8099d1ef2c83664e962d7c221a877524e58d0ca1b"
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/he"
        },
        {
          "name": "cdx:npm:bin",
          "value": "he"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/he"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15de200016fec9c18098aa2ef1e31fb42ba94a2af9951c6a7f8683fef774703daa7381cbd3b3a309eb8732bf11a380a831a782283074fc40813955a34f052f3d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-path-inside@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a90293e334315e5f252f006d1cc5b06937067c5399be23897addcecbfc661a4da0647ebbec224cf44bed7dd4a48167004d9863ff9e49674ae6cb79b2093e65b0"
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@eslint/eslintrc/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/eslint/node_modules/.bin/js-yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f173efa4003cbb285fb5ebbca48bd0c69259ed2618769522bd9a46cbab05b01b8a458ffbad019abde75e07c68af99932ababa930554bffd016eaf398cdf4722e"
        }
      ],
      "purl": "pkg:npm/log-symbols@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unicode-supported",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927c46daae140b7bbcb2d446c8054908e771166bf90d989171d94868041701b49f2726be3a1a29368b4b42bb2d061aaeaaee19a6e29b0dcffc4ba9a05e03c53f"
        }
      ],
      "purl": "pkg:npm/is-unicode-supported@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unicode-supported@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49a6b5c4f0724d3ab681d7856582cba3e445137e4d1d99006ea65e58d777069ce9a5e562b00aa90e3729f1dc9feae22f12a251778ea37a69b203888521e564f2"
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d91305066d597b928b99b358c274c2ddb7de61748bf465e1e0e8beea3de722319859fbf81d7ac5b8c204c0464ac5584a6ca631004c0cd418f1bc3768c98b06e"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workerpool",
      "version": "9.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e63d14186120279c38840743ff62d8a9edb146bea9d253a23605cb92c3b1f1f894a0fc3b148b979b61f73c198692769baf39c12ce9d5f13eeace6297bd405c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/workerpool@9.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workerpool/-/workerpool-9.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workerpool@9.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workerpool/-/workerpool-9.3.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "17.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd4b3cd143ef822a7348fe4aca9d8455ec928a3d45cc121eb5b286872a0f66ad6121cc55a1167c4fc4697eebd703d4ebbadc2d773543c29e621caefa82b8ceb"
        }
      ],
      "purl": "pkg:npm/yargs@17.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@17.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "8.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05278d9f2bacef90b8fff350f6042dd7f72c4d7ca8ffc49bf9a7cb024cc0a6d16e32ca1df4716890636e759a62fe8415ef786754afac47ee4f55131df83afb61"
        }
      ],
      "purl": "pkg:npm/cliui@8.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5948f6aa5c5a42d3b883a3eae5cdbd193716183c9df22b4bf334e58a98040b3dc97ac02288e2a8b5df0953aa2d0773c00a01bac64254c9585ba0c4be6e37bf8c"
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c6c4423bfb0b06f71aef763b2b9662f6d8e3134e21d1c0032ba2211e320abc833a0b0bf3d0afb46c4434932d483f6d9019b45f9354890773aff84482abba2f9"
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "5.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d297c5cde81e0d62472480264cb44fd83c078dd179b3b8e8f6dbb3b5d43102120d09dbd2fb79c620da8f774d00a61a8947fd0b8403544baffeed209bf7c60e7c"
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "21.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b55a6c256ec376379c0221696c80757b7ab1210b04e8da0f739fde4ddadb6c80b88742d5b16867a1ade0fa6d87725048ba31f3b31678549540f8652e736fcb07"
        }
      ],
      "purl": "pkg:npm/yargs-parser@21.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@21.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs-unparser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee9453200f5073571a6746d9e9161119b1c9b61256b9a91ff969872b4ad578b90daeb1a17e869b04d76e7ba91d20d23aaf889fee872af5a0ff9fbc7028e77338"
        }
      ],
      "purl": "pkg:npm/yargs-unparser@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-unparser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a6cba161625098eee3849595126f1a365020c7f28c0493df7a8246eba6c806b6b24b33727b8c6c65f4873b430c23e22bce13901665644c79c0dd17b86a1a314"
        }
      ],
      "purl": "pkg:npm/camelcase@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f621353e04a293d1de208c3624ef78222767137781a10ac5277c3bb05bb3497e03a66677bf9b19a54895e52c1c7fa990105f98d2bbbc35ea3ea7e9f287627e85"
        }
      ],
      "purl": "pkg:npm/decamelize@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fab2e103fb9ff7ad3a5405d1b582ea4897c30f14200c034417c269632e1bc250a714bdd138816932f73a6e1827171ceb33e09f703c6356aba38aa66233cf785"
        }
      ],
      "purl": "pkg:npm/flat@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/flat"
        },
        {
          "name": "cdx:npm:bin",
          "value": "flat"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6169dfc91c312fff92b2b5987cea54b73e5bdd80fe9f27e41ef8db71a9f393cce0c8ee00483ebbb95311b7c9396cce252cc0e75dfae24613a97a6c3e35f4f578"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup-plugin-terser",
      "version": "7.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c37888694e0ec5c179d9451789936c35eb9720c0ef16bafe6572ba6c567443ad2ac957eae2e2e9b684b86dbab7a5a1b7c76d7a7909651595fbcede932089a0b9"
        }
      ],
      "purl": "pkg:npm/rollup-plugin-terser@7.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup-plugin-terser/-/rollup-plugin-terser-7.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup-plugin-terser@7.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup-plugin-terser/-/rollup-plugin-terser-7.0.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package has been deprecated and is no longer maintained. Please use @rollup/plugin-terser"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f69cc3ab273a38b0daa9efb36c00a01646fa7ca30d1ba08e6caa676170a146cbd81b211d73b080d816aa78e33ebceb424b99dd98989c3c984a03061123a51f17"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "highlight",
      "version": "7.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9ff6ed96156555d0ca6968bf3bee3d9d06d4080e09a27608c6939548330dce69d5ef61a5e7eba535045947dade3eb778bef0f85e769a51bfe8b8d0007377e82"
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e65b1eb6ec422e2966546ca22c47e81c1457f140850fed66db1dd18fded6ad6dd5ec7deee115915c0e1ebcc8c8982b229f6276613d106950c67fecfca2775b02"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        },
        {
          "alg": "SHA-512",
          "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd"
        },
        {
          "alg": "SHA-512",
          "content": "b0a25fd7e71e401af848c92f427043343b5fe135e95615466ad7aed2df75f1b977d059db1369b8bcd2d7f9559efdda6395bf87ba0198cd6eee4171fdf073c463"
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-worker",
      "version": "26.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2966155757388be8db3296810be53efb855ad1ca7c3a2b14d7ce68ef74f5be8f7d86a8bbc3cb5225f51762cc30aaaae3cf0c5ae8aa512b9e1684fbf07f9c3a3d"
        }
      ],
      "purl": "pkg:npm/jest-worker@26.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-26.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-worker@26.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-26.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "merge-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19a340e78dfcd2e15e7d68213830561068ac2d9163d349d2e400aceb21daf672ea94ba552cef0284319e2918d99d5e0d8789f4422ee7858643ffd7c23f312a93"
        }
      ],
      "purl": "pkg:npm/serialize-javascript@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser",
      "version": "5.14.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0bd2b19e33f58540251dd32d90ad6c589eaeed7d2b8a062a938d13d6ad1801e3a583fe48b01f017c4f6df3efc1fa43a9060aeb8770f07e2942c745dc6f54640"
        }
      ],
      "purl": "pkg:npm/terser@5.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-5.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@5.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-5.14.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/terser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "terser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "source-map",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bb3bda36b91f24d8e6c3cac658cdd7e16f4f15b849a5e685868a8b1ad5575a3d9fc0e90c8f90026ec0dd10d658542ce7fa07b32d4261c4352ef8de15ad0ab83"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/source-map@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a1eb9c4a400cc8ea205c173c2fdbc29559298291d4415a83a1f9b610196dfee8e66f6db3774ea306a3986a631427891707f45d95648a090a6e296b704f0cafc"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cf4891d69a2dfde1fb94bb30e71b3d7088aa967e8d725de70740c45fda5ea1ced4cefa73ebbbae7c0320e781a05eee2b08c44911b0f47715987eb3b8956b853"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c95847d0f653d3be6dd29de5b044554bceb87a9e18f0ab0ed350514110ccf0be0eedecf0837a77f6943c2aa383505f37698015f21600d69d003edaf92bba4b1"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1769ac95aded69df8c7e1b79709abb2d25dc76e74a4d6095614830ea92c538e1d24ed6658fa496358029f8086ea8b9967413b65f984facb72ef1c54ff1fcb6f3"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f1e78b8b250675f652b28055ce5acb1c2946ec0595b408fca43e155076121e230adb3e6273a9e0120c89dcf272819e9fc94fa8a04ecf36a8f5f3d3af47f08fc"
        }
      ],
      "purl": "pkg:npm/acorn@8.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b811d4dcbddccec232617297f3c7ddac6a2fc5d482a13183459e92617b524712d95331e0e4fffae87b7aba85251eef4466877e8a75e12a8dea420c17513ff2d7"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-loader",
      "version": "6.2.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/file-loader@6.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-loader@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "5.105.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "817fdd32445073b40e3338137ba2ac60533b0f178838d412ba2d6cd27ff4c61b77e87beb81bc6d335c41960c79f7a35ba47b9053c3fb4292b0ad9630517e3c9f"
        }
      ],
      "purl": "pkg:npm/webpack@5.105.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-5.105.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@5.105.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-5.105.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/webpack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint-scope",
      "version": "3.7.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3333059522c1a8d17681c1d63b41b5bcffd84327efaf16746c5faeee6cd4759d7fc4ae00e2caeefa7ada673e62de2108935975bb289c68355307841b6c490062"
        }
      ],
      "purl": "pkg:npm/%40types/eslint-scope@3.7.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint-scope@3.7.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/eslint-scope"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint",
      "version": "8.56.12",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d37aeeb9b8d6c8e1e59a58c2568c52b8d0dd99f643cecaebcf43f62de26c397afe670150fb4c90230342c2dfc662157b677d5f82d5c94c012cf8562510bf39d6"
        }
      ],
      "purl": "pkg:npm/%40types/eslint@8.56.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint/-/eslint-8.56.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint@8.56.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint/-/eslint-8.56.12.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/eslint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "1.0.8",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7561f31dad96a845c8fced44f4e8eba1c313289976992ac4a258752289abbfa53e26e3706875ec5f1f5b2eee601bb05458520dd2c90840943f2f5ac87b1e17eb"
        }
      ],
      "purl": "pkg:npm/%40types/estree@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/estree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-schema",
      "version": "7.0.15",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7e7cff0ff0c14d0be0326420f1ac1da991914f1b3a90594ce949ebae54bbe6f1531ca2b3586af06aa057312bc6d0cf842c6e7e2850411e9b8c032df732b061c"
        }
      ],
      "purl": "pkg:npm/%40types/json-schema@7.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-schema@7.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/json-schema"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ast",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ee0440e041f9b571c469ffc6c242bc757eba21cae7e5e0995b30c6783f5c2978e7c3845e85424c592756ff7be3cbc2be97d4d870e8e2e67b9bacb8159806fb9"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ast@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ast@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-numbers",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "144f1a0a64b943a79061c577808df93b827bf3dc25400fbb26ba934e926a9f97a603853686fc099af1510b41ce0d2fb761ee968a80e496077ab1c277f8f2e710"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-numbers@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-numbers@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "floating-point-hex-parser",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea85f24cecdb2b1187e2cb5e2db2cd3aeef53a3f82f0b837e27e82a91bea7d2d8eef507163a0727cc0d1841cadce49e3f721943d5275a882a14650303b5028bc"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-api-error",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "539e86318c72e194026c365de89bafbcd57f5858a574e8ec6960f74f3cef9b0fe66acddc5f34493cc8cff3726a12c8126f2ae66868c17c3b55eca0d757d53315"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-api-error@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "long",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e1ea058d4f07f0fcc54eacfed84180e02200fec73980d0df6f8115920b27c8af9149001d09d67e7e9684befd3b08f5aa6527a0dfd83e192d748a2e722a6401"
        }
      ],
      "purl": "pkg:npm/%40xtuc/long@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/long@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-bytecode",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd06cb2b2f771741002172e1d28804551eab3ae6c0f40a19f9645884d6c5cae07bd23ddd45dc07f60faa5e12c03b4922606960dd3c4357e238ad04ebfd835790"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-edit",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44d2542101ff27c880ff5373944e0decab7264d1e2df0edab7b8438ef44d9b9adc5176b4d33d6f473de0959a142df2799a9bd884bc9b9957307231ab0b5a51ad"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-edit@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-buffer",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f21fbc2d70788ab2c0ed14f441fa241dc650dff7a9b4137f726f4939b8956114695e645a0dc3573869e21c5543cf6d751527de30c2730e02a507cb3a043d530"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-buffer@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-section",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76ce665c4a9327aa31468aa38560d4f373a0cc0623c2c095f0ba3f37ea11b0d0e6c7f643a6a6a59abb6038c907c31b06d2223fff707058012b6111ed827d1d67"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-gen",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "026a264888cff196df19086e9a436f802df7018eeab4c0979cde9b2f6bb626ce2054283c7e9ef7e5a12231205b0d1ed44088fdd27e3028015448477440dd9492"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-gen@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ieee754",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0bb4ece1e7c4bfe655f82132b19c02b6512b8d12fa5d555f409601906fcac90c768b787722c06e33946af48ff48d5a5afbc77bced650c4b2e78fbed70334293"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ieee754@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ieee754@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "ieee754",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7f272a0a9c1b0b1cd1e252a98b799703f80c7e459479e6b96581472ed7d0d71a191d19b6ec9e11280cc1361512dc66b0d198faa8ade10613fcc2184ce4cf78"
        }
      ],
      "purl": "pkg:npm/%40xtuc/ieee754@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "leb128",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2dd7b5a0da08773573764344016675759e68ac86df7fcd183dd1f1db49ab1f01eb54d3538cdafc137c73f41769706a9141b0046be7e4ac26fe7d115397feac43"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/leb128@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/leb128@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "utf8",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcd4161a3293012635c55e66ec7af488f7970fdf910e86cb965dd3f5dd803be8379b2f31cb9a5e5728d26a0e08e74991d5b05237f0add76968f91f6d264d0d65"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/utf8@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/utf8@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-opt",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d370a2d436f06a9d8d94e84e5b74e41c48cfa854ffcf9ab0d8f4dce8c098e2b25123c0ffc2e1a9f6df4dcc0954b6320f5ddc026920675414841059b3ddb344b"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-opt@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-parser",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24b065f8a674479a81ee60a7b9dff2c97d3c8d6170e4cb286a5275a50e047459608fd55d5ca1ae10d1ac8822237a02355bba7dd6b525701fcb079c9124a35371"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-parser@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "wast-printer",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90f4925c4e837b55ce47cdb40bdd11228da882f646f9cdca887cea5283bf177e18dac846cdeb1faafee8e7bc6bc68bd9247fcc7ad179523ae827f47fde2b288b"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wast-printer@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "359c896ab05f2fb9d6c08abe1432fa669ff21c485e3cc3679c9d32dea7e2782ae636f61cb7cbafb62578d54be549ee9aa407e4d1f63515b5b1f8dc1f9a9bed4e"
        }
      ],
      "purl": "pkg:npm/acorn@8.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-import-phases",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0a99baff0c38885f310e896ad34d47039b6e24436bc67d942f3367f0836bd7a91e6e5ba69aa6bece6cfb63d6d877d9bf6ef74fcf7f8008b6f753878d9f06655"
        }
      ],
      "purl": "pkg:npm/acorn-import-phases@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-import-phases/-/acorn-import-phases-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-import-phases@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-import-phases/-/acorn-import-phases-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "4.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642e417742e02578301aa5249d963fbe4510d38afc3579c9677c988b8bc3992899982fe975237435b3513f16696ed3b8b807c350015f7cef086683371a3f0890"
        }
      ],
      "purl": "pkg:npm/browserslist@4.28.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/browserslist"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserslist"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "baseline-browser-mapping",
      "version": "2.9.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a90ea0bc16b025ffbea9d9249629223e1fdb45c26eef62a5d0ac8b42ba254fb76e8a9b48d2f8dcd2b01580681bacbd26d071f246f898ad74c9bec190204d8aa"
        }
      ],
      "purl": "pkg:npm/baseline-browser-mapping@2.9.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.9.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/baseline-browser-mapping@2.9.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.9.19.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/baseline-browser-mapping"
        },
        {
          "name": "cdx:npm:bin",
          "value": "baseline-browser-mapping"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001769",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0427c52f5b078a342504658132e272859521ce8ef07abe6c563f61a9e901ffbc67d18a72fa9111fde7426109b87b16d78f85a2c921a9e343fc52e4e1eb0d6cae"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001769",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001769.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001769",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001769.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.5.286",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6d7c35e127844a14d7ab7e37427197ee7eee3dbe0eb6d3be3530db36e9af7e6e12d385d07ea6580c7a8bbdf0201a1eefd60138f688738e1d3a75856b40063d8"
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.5.286",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.286.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.5.286",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.286.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-releases",
      "version": "2.0.27",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e687794291867782b66fa9c087f9f8e643b5fe1f439e6603f8d0e89eac4680a6d5f85e87cc87993035b5a1ee505db94cc2715ffc919f8d0cb0b09b68a8ac894"
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.27",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@2.0.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-browserslist-db",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26cd26f5cc7ea8e803c68d1e32214612e796cedcfe778f8cdeb1a598a3d3f93e084bf8cfe32970dcdc29bba7294d33fc4753000b5905e156dd2eddc045fdb4f7"
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-browserslist-db@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/update-browserslist-db"
        },
        {
          "name": "cdx:npm:bin",
          "value": "update-browserslist-db"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chrome-trace-event",
      "version": "1.0.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chrome-trace-event@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/chrome-trace-event@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "5.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a61bf71355e5e2d40e4a1a92b5edba0bb165f3813051d66cc8eb924a4f6ab401b2c90b36b378c9cc2a2687e01b7f8835f3b954500bc7f87dbaa26aea89ad9a1a"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@5.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@5.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45b279fe398570d342703579a3d7939c12c9fc7b33595d0fef76dcf857f89d2feb263f98692e881b288e2f45680585fe9755ab97793ade1fcaac7fa7849d17bd"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83d963662c248bf2dfc664000ceddd118d426e99974f91e6d9f27e41a18ac125d4ca53326de3d1effebb616ee33abaef8c480bd459b3e64cf202359558b96e72"
        }
      ],
      "purl": "pkg:npm/tapable@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-module-lexer",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4f384714b99c9b1fb21d986b03f3095fd00239e7031e70cf6b5414c8fea100cb67359133a6dc38c5623ac1748d8adc16898c961f605791b4cd2df6cb2746ec7"
        }
      ],
      "purl": "pkg:npm/es-module-lexer@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-module-lexer@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8dc706c5fe16742a97a960dd1c35ba3e14de97a0aec6687950860c7f848665e956b46c5e3945038ec212c8cbc9500dbb8289a7522c20671f608562aba2b796f"
        }
      ],
      "purl": "pkg:npm/eslint-scope@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a67ca2f76fa1be457bcff0dd6faf74ead642ffa021609f63585c4b6a3fcfcbde929aa540381bc70555aa05dd2537db7083e17ca947f7df8a81e692d8bafd36a"
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30c74046e54443388d4de243f0380caa6870475d41450fdc04ffa92ed61d4939dfdcc20ef1f15e8883446d7dfa65d3657d4ffb03d7f7814c38f41de842cbf004"
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dfd9e729f7d6cfcc4dd4153fd9cefd9fd9c1f470f3a349e2614ab1eb1caa527ca8027432c96a4e4dd6447a209c87c041bb9d79b78c29f599a055f5619fd101a7"
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "990c3ed9f9106c02f343b574318d08a9d9d734e793b4fe2bd2537dcfb0006b009782a79aedb0e28b6d0062b201ac577f1f1d0cd8e733e92d75d4268591471bd1"
        }
      ],
      "purl": "pkg:npm/events@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-to-regexp",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9645f51c95f0c8c729af0ff961465cdacec3ae90221c1db5fd5f84d6b1d4ad5368924bc1e9ba8ccd3d157d5ebff3a64d69bb75935e18388693ee70ef397dc88b"
        }
      ],
      "purl": "pkg:npm/glob-to-regexp@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-to-regexp@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-parse-even-better-errors",
      "version": "2.3.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-runner",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "216a8fd9208f8725454c1b5172030777395ff6e976e4dc1a171e300841ff2a3017bae1d8e32363bcf5ec068929f23081f77e8fc9645a3ca50d87c36fca52e9d9"
        }
      ],
      "purl": "pkg:npm/loader-runner@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "4.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79f94af3012dc8e13afa1b1a4553f1bd42980a9460ccba834dbf24aef02c448c0e1a51e84a060b8015e8b9b1a02ddd9f4f8d7f39461d6f8f2fe24e1658742eac"
        }
      ],
      "purl": "pkg:npm/schema-utils@4.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@4.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "8.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e55cf78458c5cc67bb0f60e1ea983c8227371f36b52bddf18d2ad7b35f5e3291738422fc8af3577eab2771f3d298e4eef514a30f690daf05f04523934747adc"
        }
      ],
      "purl": "pkg:npm/ajv@8.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-uri",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02d7e8d783a26d2bf9c00a7855636c15813501c850453bfd701196113e296561f362c845492f4d408e88e7badd2a7f5cae859531b6056cb849fb226f9992081f"
        }
      ],
      "purl": "pkg:npm/fast-uri@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-uri@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-formats",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50"
        }
      ],
      "purl": "pkg:npm/ajv-formats@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-formats@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6024bf24d140532af9bc0ba19350d69b5081c511d6f4b6c9da8cd679e9ab22aa5bb2a2a31d5c583f28b9182d2b8d9213e49c49def8ab5534bcc24e22fd9fa4af"
        }
      ],
      "purl": "pkg:npm/ajv-keywords@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-5.1.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser-webpack-plugin",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "067e6fc66e3c7e53887e4765e42683dbed4289455ba27590dca40fc8feff12e225f466f3abf81014ecda3055048158c1d77f7ab5c2b4486f1770d27fda40c7f2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/terser-webpack-plugin@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser-webpack-plugin@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.25",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcd93a684c326c6b5ac169b2fcfcf09c60ce8c290b5920f6c2abe3186020380c02196c926177d8a31b74d082644c5fbc2dbe7b0f039bdc06b4a3d080a5ea6261"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.25",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.25.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.25",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.25.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-worker",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eefba1f3957971d0e87cfcb19f9f27acf8c192d668d2ef71d60f16b6342897e8d90da13e7e137e708bd38f5d469dd067327c9fad4386d6c650c427632a1f832a"
        }
      ],
      "purl": "pkg:npm/jest-worker@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-worker@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "node",
      "version": "22.13.10",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23a2cf52f9511fe3ba55152a60e70cb9d85a21d51559fb239d96af9ecada1efa41c1a13230ddbdaf2fb451526122660bd7ac6cb1cbb46ac91edf203eb8f3967f"
        }
      ],
      "purl": "pkg:npm/%40types/node@22.13.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-22.13.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@22.13.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-22.13.10.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "6.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "372e90676363bb6d2fc354911dedddf6356eea027ee1edfe30ca6abbba6a1391d3e96b134a571efbe19098ae545d2f26cd5f034981eb407f97adfda355cb8a36"
        }
      ],
      "purl": "pkg:npm/undici-types@6.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@6.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19ff6aa9ce7c4a9080ff17738a21f3df917818d21661666b12c85473f1bfaf90672e987ac692ae2dea09a10ba3e567c1231fde40b7fe86654f6076b126eed5da"
        }
      ],
      "purl": "pkg:npm/schema-utils@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-4.3.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser",
      "version": "5.39.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c10211722e1a35ea16ab26858c83f9d9b106204eb8398d73a7da70988d151c65911d137a9adb36fc4040d1506559056e2b95acdfd9fc6483cb73b726d36aa5b"
        }
      ],
      "purl": "pkg:npm/terser@5.39.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-5.39.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@5.39.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-5.39.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/terser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "terser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "source-map",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5925365e6e0aa594eefdb9ed9b9b7ac81ae77f6ce7b4a4fe418d2442471c58904652f124d5ef337ce1405b898bbb8f2f9e08a4a7548520a16584fedb7eb2131"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/source-map@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a601b04691bf9e6d0cb12a0cefe47bb69e644ec680ce5c787cd1ebf17685cd3abbc09d5c7bce29b37353a8e61f5195f578bcf5da13688ce693856ef3820a558"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47c80b45365eca9d37ca6ccfffa2e297fdbcb46786133871d6ada4ef4dca19644023555dbcf217746ef4549736a40330dcd03a24a2f986116ed6c257d0c9e7fc"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.20.0",
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13e5d0091c126da6a20a1b6fea4e83c2073e6f1f81b3abee2891c7979928c7f05a29b8625f3a903b02b870edb6c84946a763829a3c15853dc79b18323c69c97d"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "667e6e5dd705348035fb5122e4c71177e891cdf84434f09eecb78006426d36e952c6399afa5ee5b4dc79e41599911970467a4e807ab19e3c9a0e02673579eace"
        }
      ],
      "purl": "pkg:npm/watchpack@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "3.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9dd510734866a71e48ad44ea0f15deaab2bc6dfa816183fd76f58ce17831aa7aeb2dcd7d2f4d9259b12b108d5402e32cc1439e8ae795d4f2068d0ad2333a74e"
        }
      ],
      "purl": "pkg:npm/webpack-sources@3.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-3.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@3.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-3.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "2.0.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loader-utils@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "big.js",
      "version": "5.2.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/big.js@5.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/big.js@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emojis-list",
      "version": "3.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emojis-list@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/emojis-list@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "2.2.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json5@2.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/json5@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "3.1.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/schema-utils@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "216ae8b26ff2ae7e377a22aa91f9078aced08a80e579a5d01dd0d53ca834152c3077f0eebf25fbf5366714e9d8a41edd72c140326b45ced66e5cf0ef49e3e417"
        }
      ],
      "purl": "pkg:npm/ajv@6.14.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16"
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e69e964cdd03753195424e958dc123bb5f4881a1ee75a95c7da6c3ef284319e03a6dc42798bf82a6f78b26aff786f7f07756a87fa2f7f3a3ae824c7a45fc8c21"
        }
      ],
      "purl": "pkg:npm/ajv-keywords@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fuzzball",
      "version": "2.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d783e69c5717d225522a9a8d4c89cf60ed06ad9870f3e9e636b7d4f25f29e50b79a106f7bec272fcfdb5b9fbc79191af0996d0d060e82c28b9892a6186c5adba"
        }
      ],
      "purl": "pkg:npm/fuzzball@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fuzzball/-/fuzzball-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fuzzball@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fuzzball/-/fuzzball-2.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "./fuzzball,fuzzball"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmark.js",
            "line": 4
          },
          {
            "location": "demo-app/src/components/ProductTable.js",
            "line": 5
          },
          {
            "location": "demo-app/src/components/ProductTable.js",
            "line": 37
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prop-types",
      "version": "15.8.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a23f3b0a064809dba5528868815011ec08e50b4df6ed4e1e9782fa780bcea827ae74c0d553435384d695f9bf437f87578123f58173139cf7617deff6a831f972"
        }
      ],
      "purl": "pkg:npm/prop-types@15.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prop-types@15.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "prop-types"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/components/App.js",
            "line": 2
          },
          {
            "location": "demo-app/src/components/ProductRow.js",
            "line": 2
          },
          {
            "location": "demo-app/src/components/ProductTable.js",
            "line": 2
          },
          {
            "location": "demo-app/src/containers/EnterData.js",
            "line": 2
          },
          {
            "location": "demo-app/src/containers/FilterableTable.js",
            "line": 2
          },
          {
            "location": "demo-app/src/containers/Root.dev.js",
            "line": 2
          },
          {
            "location": "demo-app/src/containers/Root.prod.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/loose-envify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "loose-envify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-is",
      "version": "16.13.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-is@16.13.1",
      "type": "framework",
      "bom-ref": "pkg:npm/react-is@16.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "16.14.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react@16.14.0",
      "type": "framework",
      "bom-ref": "pkg:npm/react@16.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ImportedModules",
          "value": "react,Component,react/Component,PureComponent,react/PureComponent"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/components/App.js",
            "line": 1
          },
          {
            "location": "demo-app/src/components/ProductRow.js",
            "line": 1
          },
          {
            "location": "demo-app/src/components/ProductTable.js",
            "line": 1
          },
          {
            "location": "demo-app/src/containers/DevTools.js",
            "line": 1
          },
          {
            "location": "demo-app/src/containers/EnterData.js",
            "line": 1
          },
          {
            "location": "demo-app/src/containers/FilterableTable.js",
            "line": 1
          },
          {
            "location": "demo-app/src/containers/Root.dev.js",
            "line": 1
          },
          {
            "location": "demo-app/src/containers/Root.prod.js",
            "line": 1
          },
          {
            "location": "demo-app/src/index.js",
            "line": 4
          },
          {
            "location": "demo-app/src/routes.js",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "16.14.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-dom@16.14.0",
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@16.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/index.js",
            "line": 2
          },
          {
            "location": "demo-app/src/index.js",
            "line": 14
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "scheduler",
      "version": "0.19.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/scheduler@0.19.1",
      "type": "library",
      "bom-ref": "pkg:npm/scheduler@0.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-redux",
      "version": "4.4.10",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-redux@4.4.10",
      "type": "framework",
      "bom-ref": "pkg:npm/react-redux@4.4.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ImportedModules",
          "value": "react-redux,connect,react-redux/connect,Provider,react-redux/Provider"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/containers/EnterData.js",
            "line": 3
          },
          {
            "location": "demo-app/src/containers/EnterData.js",
            "line": 77
          },
          {
            "location": "demo-app/src/containers/FilterableTable.js",
            "line": 3
          },
          {
            "location": "demo-app/src/containers/FilterableTable.js",
            "line": 223
          },
          {
            "location": "demo-app/src/containers/Root.dev.js",
            "line": 3
          },
          {
            "location": "demo-app/src/containers/Root.prod.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "redux",
      "version": "3.7.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redux@3.7.2",
      "type": "library",
      "bom-ref": "pkg:npm/redux@3.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ImportedModules",
          "value": "redux,combineReducers,redux/combineReducers,createStore,redux/createStore"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/reducers/index.js",
            "line": 2
          },
          {
            "location": "demo-app/src/reducers/index.js",
            "line": 60
          },
          {
            "location": "demo-app/src/store/configureStore.dev.js",
            "line": 1
          },
          {
            "location": "demo-app/src/store/configureStore.dev.js",
            "line": 6
          },
          {
            "location": "demo-app/src/store/configureStore.prod.js",
            "line": 1
          },
          {
            "location": "demo-app/src/store/configureStore.prod.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-es",
      "version": "4.18.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27cc5ec0a0ff1a4db63996e1a4e552c1cb3ad3385df791120f07b3385b80dffd3df7ddb93dd1c9ece1473531ad6a32f7025664ca40f7d87ca488ca3e048048f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash-es@4.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-es@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "symbol-observable",
      "version": "1.2.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/symbol-observable@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/symbol-observable@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-react-class",
      "version": "15.7.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-react-class@15.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/create-react-class@15.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoist-non-react-statics",
      "version": "3.3.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hoist-non-react-statics@3.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/hoist-non-react-statics@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invariant",
      "version": "2.2.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/invariant@2.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/invariant@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-router",
      "version": "3.2.6",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-router@3.2.6",
      "type": "framework",
      "bom-ref": "pkg:npm/react-router@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ImportedModules",
          "value": "react-router,Link,react-router/Link,Router,react-router/Router,hashHistory,react-router/hashHistory,Route,react-router/Route,IndexRoute,react-router/IndexRoute"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/containers/FilterableTable.js",
            "line": 13
          },
          {
            "location": "demo-app/src/containers/Root.dev.js",
            "line": 5
          },
          {
            "location": "demo-app/src/containers/Root.prod.js",
            "line": 5
          },
          {
            "location": "demo-app/src/index.js",
            "line": 5
          },
          {
            "location": "demo-app/src/routes.js",
            "line": 2
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "history",
      "version": "3.3.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/history@3.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/history@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "query-string",
      "version": "4.3.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/query-string@4.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/query-string@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strict-uri-encode",
      "version": "1.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strict-uri-encode@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/strict-uri-encode@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "warning",
      "version": "3.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/warning@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/warning@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-router-redux",
      "version": "4.0.8",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-router-redux@4.0.8",
      "type": "framework",
      "bom-ref": "pkg:npm/react-router-redux@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ImportedModules",
          "value": "react-router-redux,syncHistoryWithStore,react-router-redux/syncHistoryWithStore,routerReducer,react-router-redux/routerReducer"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/index.js",
            "line": 6
          },
          {
            "location": "demo-app/src/index.js",
            "line": 11
          },
          {
            "location": "demo-app/src/reducers/index.js",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "sass",
      "version": "1.86.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd5f2f19495dffe98fe0a6cc2c9317ed3c860ae529ee19e439272008cb16b87b67b3c096068cfebe6121a06317b1a26b6d43fc823f85d5d2ef55eefdb0af1474"
        }
      ],
      "purl": "pkg:npm/sass@1.86.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sass/-/sass-1.86.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sass@1.86.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sass/-/sass-1.86.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/sass"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sass"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "immutable",
      "version": "5.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7bc5c9b6b22c3e86550cebc23e50438afb3f3847398de7d6acf4367b3f5974f7de03294595ed45c1310655c5aa0c49143e3c165b1c23a806dedadb0c4e32df8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/immutable@5.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/immutable/-/immutable-5.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immutable@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/immutable/-/immutable-5.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-js",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51758c2a12cec1529bef6f0852d40f5f17d853ebac7726ed52b2bff2e184f0240cbeb84ea70bf30c1c23d108522fb31073bbc8b084811bc550f3e203431a5f40"
        }
      ],
      "purl": "pkg:npm/source-map-js@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-js@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75f5270b188df47e1aa7ce03bc3dae6e3c3edef50da6cb716b44e7798fcf69ab7c6b7478b906432d2bd68e6ce7018fc3a1a86a4c797d578e8717f66cdc5dbda6"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher/-/watcher-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher/-/watcher-2.5.1.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a468f086c9aca7890bd914f3d3cc1c3a518df37a2d96a1de0ff6794fc197641fbf61ca50fdd828fa56d4f19b06c55d0722faaac68f65ee6a98c3260c0fd6ca0e"
        }
      ],
      "purl": "pkg:npm/detect-libc@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-libc/-/detect-libc-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/detect-libc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "detect-libc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-addon-api",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e66ddbb32ae3156135c5fee7cfb61774de2e76756d5caebf61f827e6a9da84be9b0a47f6c8ab789379ee4ca02d4f8af7206f09351da772c20c759b80cc98c741"
        }
      ],
      "purl": "pkg:npm/node-addon-api@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-addon-api@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-7.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-android-arm64",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "285f3e8fd9cd6d437cbf33850e944cb1a2811d9fe6723123313a153093a14e8ce40e89d0145ad171f74b5a7eb258a0a624a99d5714a01e262f4c279fe3fa9c04"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-android-arm64@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-android-arm64/-/watcher-android-arm64-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-android-arm64@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-android-arm64/-/watcher-android-arm64-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-darwin-arm64",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "780ccfbf9a2c0e6672061a2ef0fa05e22e9141701f78a2fdb636f743362e71c5c5310534aee21cfcf3a1df478f9da3b20f55177652a0b87066b13b39ded5683f"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-darwin-arm64@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-darwin-arm64/-/watcher-darwin-arm64-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-darwin-arm64@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-darwin-arm64/-/watcher-darwin-arm64-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-darwin-x64",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d595c3b61ae7366c2fd74034ff7009359f491a5ceb17cda2de03507163b377b9c9f1a8fe20bc96d4c4f1564df90dbd2ef75a03e4d964f4c062ba3325c2679766"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-darwin-x64@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-darwin-x64/-/watcher-darwin-x64-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-darwin-x64@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-darwin-x64/-/watcher-darwin-x64-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-freebsd-x64",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "488e1e96333b165a7dc8fb8a8bc5b48ab77c4c8fc92ba092c63bb73688d523a0631ec4f22bbcf103dbab8d58c4289e4c0580be6cb98c71b016959fab1642e925"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-freebsd-x64@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-freebsd-x64/-/watcher-freebsd-x64-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-freebsd-x64@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-freebsd-x64/-/watcher-freebsd-x64-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-arm-glibc",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "442759944c93b3c81ec819247273d6bed5cb638e0109e64a986611b5282dc309c74787717c7446de047df5774c11d43b29e88375ab09c30bcd485e632ad0f074"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-arm-glibc@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-linux-arm-glibc/-/watcher-linux-arm-glibc-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-arm-glibc@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-linux-arm-glibc/-/watcher-linux-arm-glibc-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-arm-musl",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e84fa6fcc9b5b75ca107c5f8d76b2d88a146dd7ca49a07483aa8635a3f952fca0790a0017eefe08c58fc0ef2eb6151d204d0befeee4f78daee8e2490d73c1dd5"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-arm-musl@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-linux-arm-musl/-/watcher-linux-arm-musl-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-arm-musl@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-linux-arm-musl/-/watcher-linux-arm-musl-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-arm64-glibc",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2eb1a9f9fd36c94dc137d03e0c6b98defddb9a71548200084c11ab8991d44447cd133661fc63b4e85179bb6931f31f860445187f24c66a6a25e23de6f4035ef3"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-arm64-glibc@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-linux-arm64-glibc/-/watcher-linux-arm64-glibc-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-arm64-glibc@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-linux-arm64-glibc/-/watcher-linux-arm64-glibc-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-arm64-musl",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7053a30018bdda93184574bb01c42ff7f33562e291c3c4999e2083c34b2c41bfe7a0f911cc0f870439309b2389629e705dcb13ae1c4ed33ab5535d5c2bd8ec16"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-arm64-musl@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-linux-arm64-musl/-/watcher-linux-arm64-musl-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-arm64-musl@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-linux-arm64-musl/-/watcher-linux-arm64-musl-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-x64-glibc",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19c1129fc359c9299fc254ec22eafee3dc83a929f2d8884f7997d7ba7422e3c0ccba029e67bbb2d455fcde93b45f6dac1e7b49e146fef64df85d0097fa81edd8"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-x64-glibc@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-linux-x64-glibc/-/watcher-linux-x64-glibc-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-x64-glibc@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-linux-x64-glibc/-/watcher-linux-x64-glibc-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-x64-musl",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f41361106dab50ddb5e1707d83d5720000d01c4d991020204f55ac4c79a09506d3a9059a5626e7fb2f0c963d20432136fb227f26a90809ee01fc0882c25115e"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-x64-musl@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-linux-x64-musl/-/watcher-linux-x64-musl-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-x64-musl@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-linux-x64-musl/-/watcher-linux-x64-musl-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-win32-arm64",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "445ce4951be67373e48ca8ebcb784b17dc03ee9a51e0029c58dcc7ee45d1ec651ed0881bdcdcfc7f23f0b59092aae1ab854e47854343aff98a06a8fbb6a03657"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-win32-arm64@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-win32-arm64/-/watcher-win32-arm64-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-win32-arm64@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-win32-arm64/-/watcher-win32-arm64-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-win32-ia32",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7362a471537e3499ae03b08695a183d6a261d5c2df0e742c1e313cf44eb4bd410c96a76e1c609d08b242203e6078554cd1d3ad03766220ef01a04426cd055fa5"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-win32-ia32@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-win32-ia32/-/watcher-win32-ia32-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-win32-ia32@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-win32-ia32/-/watcher-win32-ia32-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-win32-x64",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f651c174921378d47ef84bd241551c699a16ba9c877d77b58d9bc6674e8eff931f94f72e3cbb44a6149c2012fe02209604ee3ab43487cd6c83d2e0e6999aac80"
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-win32-x64@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@parcel/watcher-win32-x64/-/watcher-win32-x64-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-win32-x64@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@parcel/watcher-win32-x64/-/watcher-win32-x64-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gh-pages",
      "version": "5.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gh-pages@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/gh-pages@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/gh-pages, /app/demo-app/node_modules/.bin/gh-pages-clean"
        },
        {
          "name": "cdx:npm:bin",
          "value": "gh-pages, gh-pages-clean"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "3.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86d0940e5c72c822cc81a337c578340b42d6db1a9fb90ea9d39a42108b17bb243e6b592860a4ee04ccd13709b26df2e0bc90cc774af52d39f8f84d138ba0b600"
        }
      ],
      "purl": "pkg:npm/async@3.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-3.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-3.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "email-addresses",
      "version": "5.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/email-addresses@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/email-addresses@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filenamify",
      "version": "4.3.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filenamify@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/filenamify@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-reserved-regex",
      "version": "2.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filename-reserved-regex@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-outer",
      "version": "1.0.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-outer@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-outer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-repeated",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trim-repeated@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/trim-repeated@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "3.3.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-cache-dir@3.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "3.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-dir@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/make-dir/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/helper-compilation-targets/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/core/node_modules/.bin/semver"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/helper-create-regexp-features-plugin/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/helper-create-class-features-plugin/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/babel-plugin-polyfill-corejs2/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/preset-env/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/istanbul-lib-instrument/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/plugin-transform-runtime/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/@babel/eslint-parser/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/eslint-plugin-import/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/eslint-plugin-react/node_modules/.bin/semver"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc"
        }
      ]
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "4.2.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@4.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "4.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "5.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "4.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "8.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-extra@8.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "4.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "6.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globby@6.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/globby@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/array-union@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-scripts",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f15026126fd903043327e18e30b6c1b1374328ea6e661ed13ecd14ca6bc1476bd1938899582b248db167c6a8ebce822f94d351677409171ebfa834a2eb34a769"
        }
      ],
      "purl": "pkg:npm/react-scripts@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-scripts/-/react-scripts-5.0.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-scripts@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-scripts/-/react-scripts-5.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/react-scripts"
        },
        {
          "name": "cdx:npm:bin",
          "value": "react-scripts"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d455e4f44d879be433650ef3f8c7098872f8356d45d84cccbbd36af62df301a1aa89b69fa98c02554e96c9602ec90451cce971a2ef31652c972c437ca0a8f6e2"
        }
      ],
      "purl": "pkg:npm/typescript@4.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/tsc, /app/demo-app/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "core",
      "version": "7.16.5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.16.5",
      "type": "library",
      "bom-ref": "pkg:npm/@babel/core@7.16.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.26.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4499481d1b9e420c168ad5a017c39d1581995f7dbc031e4109e98d1a5a877e9967453f444a2f0990596f69561b4be52e6d563a769bfcec5b36bb9336f6234555"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.26.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.26.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.26.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.26.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "generator",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad11d3f2c88521742b018398a99415b00afcbc9f9c04da9c54063a9b957cff842acda3e5fb30c17ba70b10f443b8d3947f7c30f117c95653b240ca1223ee409e"
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/generator/-/generator-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/generator/-/generator-7.26.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fec33774ed853b35e3290849ba8d10d7bdf07f628ea3cb7823cbc7cba945f69a14a7b6ca4f4fcd1c4f1f3d7db73f07e19f291faa70b6c51c4e9d5c395ee18868"
        }
      ],
      "purl": "pkg:npm/jsesc@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-compilation-targets",
      "version": "7.26.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "217bb29f9124a2e149b1c203b8517912c892a25b1e99ed6cd02641f90c55ba0a892d898a77123555f2013acb74494bb8ae793667b92a4f09a83b5969dc721f9c"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.26.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.26.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.26.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.26.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "compat-data",
      "version": "7.26.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a07e543cb3164772f6c0414b9c52754d95ea1ee7e24ca0222dfab0e739214b874a5cb275d32573b5f8a5fedc06f040d303817fb6f54dc3d9ce97864cb2507cad"
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.26.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.26.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/compat-data@7.26.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.26.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-option",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bfcefd5ca3ca69e7974d744702ca77e3f57ee7c942945e8504c1f5ea699b74a2654e9837bda0e4dd292b47e06980c3acf1305b39d196b2b8c7c70ca94eed37f"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-option@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a9340450037230bfe8d3034bad51555bae1f8996baf516fd1ee7a186cc014e5cdedd93f16f89a0d6f0b1e62b9d8395c1f858fda7ea023cbcdd5a7ac045828f7"
        }
      ],
      "purl": "pkg:npm/lru-cache@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b850641a58f1f9f663975189c01b67b09dc412e22e05e374efdc9a0033eb365430264bd36c2bc1a90cc2eb0873e4b054fb8772ba4cea14367da96fb4685f1e2"
        }
      ],
      "purl": "pkg:npm/yallist@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-transforms",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4efb1bba0792b67331274327ba04703b0e89451664b72c1eecb4764568e2dbd690303b51d62d2f1f5c0f9e874036c88be5b4f566c7778d34304903648b1d717"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-imports",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b67500e11b2b99f94833a5ba4454cb1525c84ed974c0a8e0a672e05f2a30a1c54fadb62b2d45d20570e04ecf0195b988cc876507249142320d62cd8102488bb7"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-imports@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "traverse",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93c36e0ebc6bd16acf1f902ea6a6f62c255444ffd2d2f0449f998aea21fe1886286fae94e44b6866f71db9d4768d0e1c993c211305b50cb07e6326acf738c5e8"
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.26.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "template",
      "version": "7.26.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab246995b788a4d6619b33b2b05ff014cb8ff6c72d9a1d9c17344064e9f561aa7106c1358bd6c9218e7ce91fd604b7cb72670194cf113818905119e7372fb37c"
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.26.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/template/-/template-7.26.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.26.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/template/-/template-7.26.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "11.12.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@11.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helpers",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50f61cdd26aecd9dc91a08fcec6819f3d255742e5d8f40287ad479070eb08f89e28adb4dc8587af9e386a2762f2756a8e81f2511add0de4952ec00d9e776dce6"
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helpers@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.26.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.8.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.8.0",
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "type": "library",
      "bom-ref": "pkg:npm/gensync@1.0.0-beta.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@pmmmwh",
      "name": "react-refresh-webpack-plugin",
      "version": "0.5.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c55a594c039e69cc1f43df8c3fc175027fcf9cf8860ab890e0c62677a8c865eb82913011d833523755d19a0f6055e4534f576fd2db9f7a6e9a711dbbf667275"
        }
      ],
      "purl": "pkg:npm/%40pmmmwh/react-refresh-webpack-plugin@0.5.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@pmmmwh/react-refresh-webpack-plugin/-/react-refresh-webpack-plugin-0.5.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@pmmmwh/react-refresh-webpack-plugin@0.5.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@pmmmwh/react-refresh-webpack-plugin/-/react-refresh-webpack-plugin-0.5.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-refresh",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "176eea66bf2e52ac215996e8a2776c3f1f2d9c2dc2b774b1640dd5e56c84bee8d1cb236fd1560f868060d6067cfcc579b6e6d0a7be93af0f254eff61cd105af8"
        }
      ],
      "purl": "pkg:npm/react-refresh@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-refresh/-/react-refresh-0.11.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-refresh@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-refresh/-/react-refresh-0.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.21.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b74af306af3b9b77d571db870d41612a6cb25fef5ea3a5908d9bdfe7511afccd10efe4f7ef8269d5a522c9497418ac69f0cfce113547483be69323e0bd7f97db"
        }
      ],
      "purl": "pkg:npm/type-fest@0.21.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.21.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-server",
      "version": "4.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d176af0196cd279b03ac26e4a562fc9a26b4a3958f39dd981adc6b12266404af458cba692142b64e0c4aeaa183d8fde15174c934d3d589badeaca731e56911d6"
        }
      ],
      "purl": "pkg:npm/webpack-dev-server@4.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-4.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-server@4.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-4.15.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/webpack-dev-server"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack-dev-server"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "bonjour",
      "version": "3.5.13",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfd7c9e489b4eb3bd42f9e3c2af60d79c115940edc543906522ea466eb1bd389a9c8414a088649be5a02726a662da21a843a4e4061da1e61ba8a6b4f3263d719"
        }
      ],
      "purl": "pkg:npm/%40types/bonjour@3.5.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/bonjour/-/bonjour-3.5.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/bonjour@3.5.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/bonjour/-/bonjour-3.5.13.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/bonjour"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "connect-history-api-fallback",
      "version": "1.5.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fa0abdb14b5878b80ba53d1765c3a265eacd681bc2ab56294f376c9421312cf8ae3c1333092775b5c72f0ae5e5ae16f8e9dd1ef800e2064a6a7651f049f0717"
        }
      ],
      "purl": "pkg:npm/%40types/connect-history-api-fallback@1.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/connect-history-api-fallback/-/connect-history-api-fallback-1.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/connect-history-api-fallback@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/connect-history-api-fallback/-/connect-history-api-fallback-1.5.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/connect-history-api-fallback"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "express-serve-static-core",
      "version": "5.0.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df18519e324f9142de9294b382da0d6187135a0119929e26c9cf9269ebe28b924f9c736f1cc4650521c36ecec187588f3e85531111c4657ca1c8b6cc12c131b0"
        }
      ],
      "purl": "pkg:npm/%40types/express-serve-static-core@5.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-5.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/express-serve-static-core@5.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-5.0.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/express-serve-static-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "qs",
      "version": "6.9.18",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90aedd813603c86a92f9ed90e1a2bd5f70fbab6df808867506fd2affb679230443a000cd53cd715c92bf615c8b6cb4d90a82305280e87df15e17ea7f78892500"
        }
      ],
      "purl": "pkg:npm/%40types/qs@6.9.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/qs/-/qs-6.9.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/qs@6.9.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/qs/-/qs-6.9.18.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/qs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "range-parser",
      "version": "1.2.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84aa2b9896e426acd01a1ce26b1e4f22d0d44cc00cf6e1365d7426337eddc9de2154cfb969597ba15c4c554895427da809014dfcb28265dbd2334a4546a6d299"
        }
      ],
      "purl": "pkg:npm/%40types/range-parser@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/range-parser@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/range-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "send",
      "version": "0.17.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7610ce9324ec9b79cedce76057d19b293e874cb1051de4be8f4703ae9d5c955215e205229fdc07b30cbf0382f82de68d147ca35fb80d1e30baf6c0b4f802204"
        }
      ],
      "purl": "pkg:npm/%40types/send@0.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/send/-/send-0.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/send@0.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/send/-/send-0.17.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/send"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mime",
      "version": "1.3.5",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe9c8165648b0f69f475c1c4de1abcb3c66f7044c7b44b85fb713b5d5b74220da7bec5505dd8211d57049085a3cbd034c0a7d39fdedafcf48362884a2259cfff"
        }
      ],
      "purl": "pkg:npm/%40types/mime@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mime@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "express",
      "version": "4.17.21",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a394f337d79ab02e96909500d38cf76c50549ce99b0fe0037a0255a7a203e343b0958bb3d8177615cfe098de3136a7061fec4ffb1e50c0374ad5d86c531b41d"
        }
      ],
      "purl": "pkg:npm/%40types/express@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/express/-/express-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/express@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/express/-/express-4.17.21.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "body-parser",
      "version": "1.19.5",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c1dd9bbddae71abb4890d0930215013b6ff76ff0eb74ecd23729a64890850d5eaf3693878102a51a9de5df95e198f495ac91e4bdcbebb49d7332b2972e42b0a"
        }
      ],
      "purl": "pkg:npm/%40types/body-parser@1.19.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/body-parser@1.19.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "connect",
      "version": "3.4.38",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2bab9139fd4b0fcf2e0d0a890a4b40e32ccbd586002ba3607ec234bff9938323ca5ac5f50a72745cf48385589e8ebbb519c4642d66fc465cc560946a1946daba"
        }
      ],
      "purl": "pkg:npm/%40types/connect@3.4.38",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/connect@3.4.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/connect"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "express-serve-static-core",
      "version": "4.19.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3782d9db11bb0dab55aa1099cce19bd588b994c6d749972674b0def44cd29dd3d5d87a56616cd16da7ab9769f6ee2aeb9bde043e9a6ba9af0aa6c90f4f4f39f8"
        }
      ],
      "purl": "pkg:npm/%40types/express-serve-static-core@4.19.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.19.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/express-serve-static-core@4.19.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.19.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/express/node_modules/@types/express-serve-static-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "serve-static",
      "version": "1.15.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bc626fa1f2786e47068a3da0f0df8414930b068ba45ce3262abca168e6b9b61541210856f3556af15d4c6e28af130128d6b32b096349ec98d086842388b2b3b"
        }
      ],
      "purl": "pkg:npm/%40types/serve-static@1.15.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/serve-static@1.15.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/serve-static"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "http-errors",
      "version": "2.0.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f408530cb7275b2407a0ccec878ed88a3cb96f9e6de24d9c994526682eada64610dd98b7c858e0983df409e1cbb67ab2a0854fbe42f8dc523a7fe61ee1112a4"
        }
      ],
      "purl": "pkg:npm/%40types/http-errors@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/http-errors@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/http-errors"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "serve-index",
      "version": "1.9.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ba4667f7367e14ace609d8b10c6d0c4ab73b2f125cf0a5217916e6086f02fb0db95480f24fa008e35c5024bf5232c462f629b3e7bcb81b5f81782f8707cdba"
        }
      ],
      "purl": "pkg:npm/%40types/serve-index@1.9.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/serve-index/-/serve-index-1.9.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/serve-index@1.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/serve-index/-/serve-index-1.9.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/serve-index"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "sockjs",
      "version": "0.3.36",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30af55e8dcc04b5f9477b255f6524b16a5bce556c2f5dab72e6c190ae05ee3004380a0b42a3fe377c5e5fa74af894f90737fa6eee9871f21e0fffd8a49ad1ad1"
        }
      ],
      "purl": "pkg:npm/%40types/sockjs@0.3.36",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/sockjs/-/sockjs-0.3.36.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/sockjs@0.3.36",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/sockjs/-/sockjs-0.3.36.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/sockjs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "ws",
      "version": "8.18.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2cbef23784ccaf37490a08932f4c93ffc7a63f12841b7a97dff3cdb02fe4a7e50b176f77ad9da9a0ac9ab88acac1c52263e4bd80b97708d3e6e092801719427"
        }
      ],
      "purl": "pkg:npm/%40types/ws@8.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/ws/-/ws-8.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ws@8.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/ws/-/ws-8.18.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/ws"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-html-community",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d403c7032af7f8f09a9b0370ddb5c23e9e0714b38d66dff2207d2c669d3fe3af4a58d4c4cbea8de634371955fa0cc675517022df8c95c2d4de686fc7a41baecf"
        }
      ],
      "purl": "pkg:npm/ansi-html-community@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-html-community/-/ansi-html-community-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-html-community@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-html-community/-/ansi-html-community-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/ansi-html"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ansi-html"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bonjour-service",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd8b805224a45b291dfb60338e0cb17a2f0e59ff2d85d9fc0084c8a20d8ce14202ce8a9f8e5aabeb85888c45d99657ff5babcad60a2a95e491e9bac6a26c50a8"
        }
      ],
      "purl": "pkg:npm/bonjour-service@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bonjour-service/-/bonjour-service-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bonjour-service@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bonjour-service/-/bonjour-service-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns",
      "version": "7.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9ece73c93fccf60452d7e74b5fd0bb8e0eba4836a3f5455226fc239b6d37014484d08260bf4e3711105d4d79307321c4795cefee916a3e6073a305b17022ea6"
        }
      ],
      "purl": "pkg:npm/multicast-dns@7.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-7.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns@7.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-7.2.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/multicast-dns"
        },
        {
          "name": "cdx:npm:bin",
          "value": "multicast-dns"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-packet",
      "version": "5.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97881c4a8ba172020a46fcb2f7d44d54e8315e289c13eda366836668d999e895e219a8c138901eb24d4e06526e33993673e7ae74674bc43a97b8f08a223ea4a7"
        }
      ],
      "purl": "pkg:npm/dns-packet@5.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-packet/-/dns-packet-5.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-packet@5.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-packet/-/dns-packet-5.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@leichtgewicht",
      "name": "ip-codec",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "568f8f4a9646dbf7e682688dcd82bda96461f21fc21ebc03d26a358750f32f8cb31cd49f598ba319362c586ade0f4d3481c82667b2b862ce93c7d4f1b6c29d0f"
        }
      ],
      "purl": "pkg:npm/%40leichtgewicht/ip-codec@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@leichtgewicht/ip-codec/-/ip-codec-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@leichtgewicht/ip-codec@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@leichtgewicht/ip-codec/-/ip-codec-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thunky",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78763b9c17ed813841a8ec8719537e97c805d01b9c3f4f5f328d283bf2dbd30d4e17cd1d26ffa50d5a571bad16310be47310243726cab2b10813766d28698fac"
        }
      ],
      "purl": "pkg:npm/thunky@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thunky/-/thunky-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thunky@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thunky/-/thunky-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed54f5ddf9a3a2d2a91a2a425bd244400bac10f13e122f2797afe0e050409889b418e38b32e6bd3430e8fc35a9d190310abddc3eae59a41aa63c04200dd6b63f"
        }
      ],
      "purl": "pkg:npm/chokidar@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28c45e154af4078b7e0fe381923477298aafa1ca765da4b33b9e54701ea681031ddca6dc13e9964f2bd557b0ffcec7446cd9d5e9a71952eb64887417bd3af547"
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9e66ce4bb375ad0a2b075a9f52d86532f1daa4a468b80554b3dc66aa884e9ecee6f4e75d844b3b57530501e82e8829b4246363e76ff983e166288c24707302c"
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64c11161eb3aa43c9dcae1a276c7bb3ac1f1b5b23b595794128ce047f83baddd31522998365bd9444fcad8c8194e35b2ef6e487de94b79570433dee69ad4465f"
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09e87eee8c79a9eecb26e2c7a18d1f7a1de91ee5031c071151ec8bd95620859c1fa64348cbffbc39c8346b752e4a86336af9b2970b8b59039fde19748e330c23"
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84e4b4f3da27f1176ea9d6e1bd0e59dfb0341128ecab3eaa9d171f7ec314df8f7916e4dda929beedb849dbd26f20eb010c41276a7e433eef6ddd3a3d55194ccc"
        }
      ],
      "purl": "pkg:npm/readdirp@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e71a037d7f9f2fb7da0139da82658fa5b16dc21fd1efb5a630caaa1c64bae42defbc1d181eb805f81d58999df8e35b4c8f99fade4d36d765cda09c339617df43"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colorette",
      "version": "2.0.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21f103c70a1622391e5cbd5e5dc0e2a30e146ca8e12ddabafc4b92551f4630deca547debf6043cddeef786ccf535dd53de28dde71bf5c1c59160ef83ea4088db"
        }
      ],
      "purl": "pkg:npm/colorette@2.0.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colorette/-/colorette-2.0.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colorette@2.0.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colorette/-/colorette-2.0.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6602a18f1cb6a48422de372c4f90ae31568ef8eb343f7332c7d4acbebe48ad32759f599a6cf2bd2a5eec21c22cda80246db6c2f895f1b8a483af6962e900fd3"
        }
      ],
      "purl": "pkg:npm/compression@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "005debecfe5d5b12fc331c884d132539140d68e036224005693af893b054ba68cfb51a460d36699743dbd5708ee89783081769d76e8282cf6c331a928e063246"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b2453dc38963c7aa1a393eb25a211c9a32fda48187f499456004d39832e087e4a8b5c8489069ffd926e43ada7be9738e302f95836d35fbc86262d4d79ebf0f3"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef7ed9637c8d9d7cb7ec51e44313f3b78519d9458f5a209958bbc56787eee5cb9e7227a05f4cc63e7ae563a6f0460e0575039ef5853c324989c068683326e5f0"
        }
      ],
      "purl": "pkg:npm/on-headers@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-history-api-fallback",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53bdfeea540599f88d3eb61b5eaafa919d62d70891a979e9da784cb0836c7965cef250dabb42c611f7c9f24422e048cb6729a956045dbea8c0822675b60cc30c"
        }
      ],
      "purl": "pkg:npm/connect-history-api-fallback@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-2.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-history-api-fallback@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "default-gateway",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f048e26c6db37367f094169a8506a61f60d2e3d4d6cc3e6f0c3022331e30bcde248944110698353153e58febad4168140899e0b6c87c17b73f8ffcef68f9712"
        }
      ],
      "purl": "pkg:npm/default-gateway@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-gateway/-/default-gateway-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-gateway@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-gateway/-/default-gateway-6.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2e4a9659a1c01944100f20420d263dcba3d1f21a2b6595ccdcdbb121e586288e3305327f321cc0cc6941c4d89a9fab4e43ff0b9cc08e091944725edd6f721ca"
        }
      ],
      "purl": "pkg:npm/execa@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6ce968beda3de3423aa2ef4c3902537c0c59e44b00be32a9b113374400b076a976585775ff6f50937e03cb18934c7805b174f7d4f053b59acdcd51f68708f62"
        }
      ],
      "purl": "pkg:npm/get-stream@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "human-signals",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07814567aabf4f68e1864b2091b116dc706f5887c35bce6c9e44206b0b74ed2ec9e505d393a064355fb4c80799acce50a4c01d625a1c1a89639f4b09fd642417"
        }
      ],
      "purl": "pkg:npm/human-signals@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/human-signals@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "845a222624e5eb79e7fa4b2d1c606d7b05922a740ba726f5e7928785e035977f6ebed3bd9d6228a75a77b9da8f71477fc5b17554b30ee27ece23aa7b45b9e00e"
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b8f16cd95bbefbce1348ae7ee0c4e94848d02a8bd642fee4059d175b7881e1661080e94aa990e4fc4f51bb06f7dd80fe04afc805e2c51b692d22ed0bc87c25b"
        }
      ],
      "purl": "pkg:npm/npm-run-path@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91ba5a4921894d674063928f55e30e2974ab3edafc0bc0bbc287496dcb1de758d19e60fe199bbc63456853a0e6e59e2f5abd0883fd4d2ae59129fee3e5a6984a"
        }
      ],
      "purl": "pkg:npm/onetime@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"
        }
      ],
      "purl": "pkg:npm/mimic-fn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.7",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-final-newline",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06ba6f7cd004ddd72fabb965df156e9b38ca8d9439b48d6c11420aaf752892cd17525e394addc595ab55a9e7fda6b9388d10f3856e96660fb76e4f77cbaa4b8c"
        }
      ],
      "purl": "pkg:npm/strip-final-newline@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-final-newline@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.22.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1765fc83d3f55fbb823d9300dcc55ff70713aa5c8da7b2211f9a8f088d22ce168e2185da5bd2f9df9b46037aa68d1ce91fe6d9733aaaee154ac534783569eefa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/express@4.22.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.22.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.22.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.22.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d802d8536b69b654ac6ebd20f70cf0bf1b2f94fac380d4b02e4fc9a4991bafc3e34009269e5c443e34771517bace365eaa71ac55dd4b9e9b06b093eefe4892f"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8452ca863cbb0cfa3ff37428598ec9d7e758385eb1c53885f07e70953c695093f9398226a470ab2ec4239b051bba0d29bda29c3f3bab2559b25d82140ce1b06"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c254042cc167a6bba51dc6c0c5157ffe815798a8a0287770f75159bdd631f0ca782e3b002f60f871f2736533ef8da9170ae82c71a5469f8e684874a88789baa"
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.20.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65381860b30e5d8f6a294ff9ec5028f05f870367465fb6ea19cef5b710d10b5ad2e1fadd148e51ecd865b87c47e8cd1822d00fd2c1c1e2ea8039c60ac4eeae18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/body-parser@1.20.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.20.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d38ea7dc045122a4a7570afe180d05827e670b64a9bcd65745d29028a53bf2ac51956dc47a3ff54001de46ecdfb4b53afc42a894d2d15a743e852b836d27038"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dac246253697208691d70e22252368374867318ec6a5cfe7f03e2a482270f10a855977fb72e0209c41f1069c1e69570f7af0b69772a98d80b1dcdca941081a26"
        }
      ],
      "purl": "pkg:npm/destroy@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e056d17405fe6d2766a3801416e4b458d88fcfc36016dfabf138603569a5ae3423b7543b651f7ecd395c7b6f39f71e0a497af022c69e4ea0e82909ad3fca4b99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ef132e795770c1eee927468fb888e193e5f3f5b2547cc10a2155d9278a064f32932cb5a289416870898040089137525da94e70138a18416274616501c606247"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/statuses@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.14.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57fc825934c5ed527d848875f1482bdb384930fd35318edce6487827cef42fb8a69bafc323306c34b4d7cccc14037c99e5bfca06a2f1f0aa77b91bddef149edd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/qs@6.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "657f7d7bab51c1ea145ea47e541aec96175ae75361e4c4d0c28bb9b6750381bb723347418268440ed5863ffc5b2a7ea1a9f3d11ee8d4370cf97f2ff06db867a7"
        }
      ],
      "purl": "pkg:npm/side-channel@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-errors",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3"
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-errors@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.13.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5baee22e5e09d845c41936df78709f7eb8c37e2b6f2c0360d14957df01545124f1f762974457a0307515812a84fb0be101b8b85aa8c683d733cac4d5d84a5b7b"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.13.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-list",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1422c7b510ff827a428821c48892cec1d9853fec330a60c491cf72ecdb18c5e178bbb06db27d59bb0830246c4898898789c240acb3f8474c97e1cd8a0ab32b4c"
        }
      ],
      "purl": "pkg:npm/side-channel-list@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-list@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-map",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5428c235f80cb1bcb7b53768d369db8ed33f7b0adaea33c79a94e17a7913621f291bdb9c67fd4ff12a38bb814605e93f063a4e56c0c23282c0fe2b8128815744"
        }
      ],
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bound",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb2b3df7b53dea9a382b1fc0069042aa103d12ec49690583420ef6f791f8841a61bf72198346e804abb0629b78617a7a319e4099942753fb72313951a5a49e8e"
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bound@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a9d5a6e52748af0e44b38dc68977112e9cde7f5ef92c149dac30115fabac74af285057fd9bfcac057b6d5c329987b4f3928a3f0af7dff049fa04b9339b9ae31"
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5f4a349aa2cfdf448548a7ec5226513a95fc21112ecb36d29a08121a987b23af69dad418800493e8d263a38f3f062435116ab9823c6a9a89583999f8dbf7c09"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-define-property",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b79d17e07d4678acd18bdb7da05205f4e90372c9ecf4e0a76316b17e2d34683979ab3a014a0e0e0109db235bc1274faf5ea9d606991a49c223d560dac2696de"
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-define-property@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-object-atoms",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "146807da1f3328d8a6f658e3edd6a79053dc20220af42a796e6f9cda041261e3e1a5a1b9f9eb2b2ce0e2848a2b9fe3dee85189cd6857428b4fbfbde34da95d5c"
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-object-atoms@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-proto",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1349f063a17069f3d26f20a21e7eac3b53608279bb1cef892263a6b0886a202ada1219b823604fc6ffe97db05dcc5853cd73d21ca0e0b83837ca1dfc459a9d2"
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dunder-proto",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28837f9c3241411717c3430b561644f62407986ebca80548060f42aa65188e64088608a3f54e4c16faea9142f915bb72cb366e39e3add3375e45ee1463b72df8"
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dunder-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gopd",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65429187afe4505a0089302d4d83d9277870f70371c7e04804e8a39e51bd3e7ac9b027128ecd70cb20fabc9a5a62d827cc3aca6114aa7f738ee917daf77c6c46"
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5c0cd77027625aa2199bdec8383a629a301c2e0b8f2c6278b91d4c360efb02f0b8c64cb2bd87e79bd57e91cae3877b8853d142c25baf22a26863528294aa53d"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hasown",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d21254f5208fbe633320175916a34f5d66ba76a87b59d1f470823dcbe0b24bcac6de72f8f01725adaf4798a8555541f23d6347e58ef10f0001edb7e04a391431"
        }
      ],
      "purl": "pkg:npm/hasown@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasown@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6"
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58f4bf1ef1d04d89c78ac2e8f4c72a0473899361641cefed969be5772ae77a6e1a790a7885a8b7832b61b3083aa74d684a84e5e7cadca621408c5d9baf6024d8"
        }
      ],
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3855239feb2374aef6d1646c6cf0e9b90968fab1e9de3302b7a036f89560c7d143e159cc70396c39faa936e1bc6af3bb335f5c9daf0ca520ea76b86d688d4a4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/raw-body@2.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76afaa7a543d6a41e970e97f8145514f15483a4009d70477400bdbe11b158d2f285681630c64dcebbf702589949a49d41791f030b3a06f93be6b72b17d66a93d"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16f7994cdb86c34e1cc6502259bce2eb34c02ff9617a16966d3b6096e261e3f13de43a8cc139a16b7299375680580f1c148847ccc654bcb7af930e51aa4fad49"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e839c89e9c7b489d802b7f824d413f64cd2f59351ba1909e831842db1888c9d1d1f6336e4c001206b7c4a4786218e670fe75f9d5b1ede98425f23b06a38cbfd3"
        }
      ],
      "purl": "pkg:npm/cookie@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4000f395a1dcf22715f08eef6da257270a1df47598a7cb82a9fd716b839f36ed53ec9571408ad480e5ad1dd343b4f8b2c2615b892d76563a2d2172eb28cde8ad"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4349fd1d18b89ba26e188575785966bc907b644571bbddc8accca232c182d25acc24c5b3460c7a586aaec9f4206556f7d6f8468179df98f34d5e6c673a4441ae"
        }
      ],
      "purl": "pkg:npm/encodeurl@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8137db6b1fb6e9deabe7ad1cb3b01cfe837959c533594db54ed84575092d1621c0db6b0615758bc67e5304ffd40fd21d296250830424e361af67673303a72c5"
        }
      ],
      "purl": "pkg:npm/finalhandler@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "470340f59ffb3eb2b4eab60b23314c95a17e97bde2c29ceca9120581b30b6d370b0fa70e6a8f364da59e7cf5d0bc1d9f382e008ee612127752ecdfe64c26e475"
        }
      ],
      "purl": "pkg:npm/statuses@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc9da6418335f2b1053ae75e57819285318843b45bcc0ee8cdb53d23f5c1a66ee4aa0332c209b294cc171f16499a45686249daf5dda95575573dd6133fd7a3f1"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc2b1bf7ae0736848d8791a8e825cbb1b4aaf8a25e82569ef107d99d6994175781bca3bf7e291d349bf73a1e1ccc83cb7dfe0d6cb95adf56a3e4d446d39849"
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81a36f012ed367cf7bfeb55a6749ccb40cb13728bfa5d6e36c0c14a4542937bd06aa755f3a25e979450c291066cd769243c0dd4d7e3fd26b3adabd8afa113a99"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89c9401de36a366ebccc5b676747bed4bdb250876fccda1ab8a53858103756f1ffbcf162785eea7d197051953e0c0f4ff5b3d7212f74ba5c68528087db7b15db"
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03f00634c14dddcf1b3a5bd5f51ade31daefee3b2617d5c87c378277cefe23c44d83ab3bf01849c4cbbaf4d10c1c14891712a275589311daee470124fd620aa8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "756e35bb955f2d7bbc4898796f0466c9851b028481ddcf6e421e8bf21fcab6c15110f5a96d7d65ae58c9a35f3a25ce2799c8bfb06519f5ad1ad09db381fab687"
        }
      ],
      "purl": "pkg:npm/send@0.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cf257abc26a15a5589b609698fbe73f6232a3865233bfd029c4a6b8c2c339b7e91f97e2ed150699dfeb4c37feaeeb7fb1a88389011e5533600262447403b1d3"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.16.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56aa6325929a75007f3c46c4c2f15d3b8dc0c79745059d94102b33cfc6d0ee98bbc2dfff3d67b53fa30dede0a78ec6ad62d053e84ba20a56e34963f65ab2284f"
        }
      ],
      "purl": "pkg:npm/serve-static@1.16.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4c653bc8913d5df93146bc33aaa1d39c971d105a49208ba4dda1af200bc7df18002acfda733d36560326dbb071e8103ff3b4cb64bff5686136324a1527f3584"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-entities",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2bffcf491310938159efc2b26aefa666eac79f7147d15c2bf87dfa784d2b3db798911462f58c5c7983e1b8deb45305a8af1c8a1e1aa800997638529ae0156d68"
        }
      ],
      "purl": "pkg:npm/html-entities@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-entities/-/html-entities-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-entities@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-entities/-/html-entities-2.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-middleware",
      "version": "2.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7352322582d8a69539ef8f9823b4784325f6cacb4cb555d9c087736b35083c826c1ee58d77e9a1a368fe6caa077ed9dd89c1a3f7287ec6377e974ca3ed5793d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-middleware@2.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-middleware@2.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "@types",
      "name": "http-proxy",
      "version": "1.17.16",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1d5a851a8ce07571dd00f1c45143571fc9635b98528b02a041f3d63cc79898c86fe69091dcd18507f29756072da89a2f6ab42a622201a3bb03b4750493da5e7"
        }
      ],
      "purl": "pkg:npm/%40types/http-proxy@1.17.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/http-proxy/-/http-proxy-1.17.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/http-proxy@1.17.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/http-proxy/-/http-proxy-1.17.16.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/http-proxy"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "1.18.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee6cffef6d406e72702156e7692bf50b3dc09b464b4ff501c240bdd95971857bff93f04141f3367d712540d0b6ec1546af4bb0529a6560f40cf4b9da04c47935"
        }
      ],
      "purl": "pkg:npm/http-proxy@1.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.18.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f20b870590b02a716161d1ebdb2b2e45612b4f08683765fc5c42d196b470a667de6368e3b94378b5a40cb142ca515a352b80ef665fb4a607f2a32b07c6f9af13"
        }
      ],
      "purl": "pkg:npm/eventemitter3@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "follow-redirects",
      "version": "1.15.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81ec381ac5e2ccd81da11caa9b27cc1f20265ec64393a987912c59142cd6f60c256ed396e38083b586af33ecbeef6a83fd5ab6979e7490c179d834fc7ce2c9a9"
        }
      ],
      "purl": "pkg:npm/follow-redirects@1.15.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/follow-redirects@1.15.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a280e087728714dd7383271b2ef22fe3f13f6dcd3e1a74789e730391450d19645729eda8705ee454d66fb2b8ef740b9654c867867e87070c8d783372f7c8301"
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "830b0e136f24fb6dc63f507abc5975a1587f58ece66b006b2b0a3912feb030accf91a5da0832102b32e7bec038d834656d54d6a2b9204ca22f8802825a47d4c0"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "020df0076a37ef0b25652d7d859aa8ad49eb9f34a4a4e572f888a20c4893a8db9b118a58b875887fa2b8a6c80dd9958a1314b8c61542ad155f6ffc1f5bc7d624"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "launch-editor",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fb741449a3fa9c197f7196fb7feb0518cd0c638791b546f64f80fbfcbe2e0a454f7d0d540bfe85bbb6754e0824e6d8719ea370b91ef184e58ae1e94068674bc"
        }
      ],
      "purl": "pkg:npm/launch-editor@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/launch-editor/-/launch-editor-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/launch-editor@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/launch-editor/-/launch-editor-2.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shell-quote",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "033a8aa462a3ae3ec433aaca55010fa41dbcf2809f9eb108bb2a13f5cc85e279866bb57c664e9fed146a622b17f17f66f90edb77adf66995b8932ec485b433b4"
        }
      ],
      "purl": "pkg:npm/shell-quote@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open",
      "version": "8.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef1f353422fbd7da0d6ecabfde687e855ac05a616e11852aaeafc8c37914cc7f117b2a53f5043404ba094bbfc6f64e8df355e35b8a875ad8d6c1effd78bcb511"
        }
      ],
      "purl": "pkg:npm/open@8.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open/-/open-8.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open@8.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open/-/open-8.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-lazy-prop",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ecd3da8d87ccb0de48528e22638942276865fdc65a990d8ec956bc86c5dc55ecd3debaa41fa653a943aeb224566eb778cb6b9ccec245f0d60f44236b8a8783a"
        }
      ],
      "purl": "pkg:npm/define-lazy-prop@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-lazy-prop@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-docker",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17e8b604ab05ac7eba89a505734c280fcb0bcbc81eb64c13c2d3818efb39e82c780a024378a41ea9fcfcc0062249bf093a9ad68471f9a7becf6e6602bef52e5d"
        }
      ],
      "purl": "pkg:npm/is-docker@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-docker@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/is-docker"
        },
        {
          "name": "cdx:npm:bin",
          "value": "is-docker"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cacc0adad2b18951407018180d90766e4e865c9fe4ed5c7a5e0a09a430930c631d6c40361a092ca32414826b69c7d431a6eecde7d68067a21a154c168decbc3"
        }
      ],
      "purl": "pkg:npm/is-wsl@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-retry",
      "version": "4.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df5d88777f7a11b25dbd138d967814c7437275fac843996c62ed339ca554cd5bc0af3108b74f15d6a86dc8449b1957751465fb50ab62169e6ec0a65d33cc08b9"
        }
      ],
      "purl": "pkg:npm/p-retry@4.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-retry/-/p-retry-4.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-retry@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-retry/-/p-retry-4.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "retry",
      "version": "0.12.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1628e0a54d38a2cdc6615e73d8e308a4540c267581e9f2ae83982f84254cc032cc9c6fb1c1df62a1f51378fb4804c6398f9994804238144572060133de800bc"
        }
      ],
      "purl": "pkg:npm/%40types/retry@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/retry/-/retry-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/retry@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/retry/-/retry-0.12.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/retry"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "retry",
      "version": "0.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d0050dc8f16d4281ed127a1fba8238f4dcb6e64455aea2cce02bda280a9c1822b861a0ef34a5fab8714914e439249f07ce7c5b5e470959e7a3d838663215676"
        }
      ],
      "purl": "pkg:npm/retry@0.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/retry/-/retry-0.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/retry/-/retry-0.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "3.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rimraf@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selfsigned",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b61e41e0bd94f9e18bab54d587bccd44605aa62a1239151eca6232771805a70c30f5ddaac8abedb8f5368c9b87bd8030c2a8b6639f7a4012f7784a9c3c460bf1"
        }
      ],
      "purl": "pkg:npm/selfsigned@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/selfsigned/-/selfsigned-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/selfsigned@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/selfsigned/-/selfsigned-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node-forge",
      "version": "1.3.11",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "150c76db4cb6d8e28d4ea681c9e046a87598cf8725f78b6973178576f068df08c6e973c1b99d01360359455e49e5316699cb09e08cec2e498646241b9d8b0111"
        }
      ],
      "purl": "pkg:npm/%40types/node-forge@1.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node-forge/-/node-forge-1.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node-forge@1.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node-forge/-/node-forge-1.3.11.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node-forge"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-forge",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2daac51f4fba55fae2121a8c31c2d7d85ed2c125de5b09c400912c626e50296721895615bc9c95f6fed40ef52ffb0e473b6dd9a504d70effc6c5d0dd3323aea1"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-3-Clause OR GPL-2.0-only"
        }
      ],
      "purl": "pkg:npm/node-forge@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-forge@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a571df28d3f8aae8ebb6d78cad205bd2b73c1c9f4cb3f1ab5f0714b54b43e6ce1ec03248f1b4f70b3db34d544c2adae2e3da4bc767b461af3388fe586b6a5967"
        }
      ],
      "purl": "pkg:npm/serve-index@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7e54088c44be943e4c7e92e74dbf14e5ea10765cd3421b6afeef08b155f218c2eff61ca4578a6c10c9aba62e332f796bd3d8791dfdc009c3e40131f27f10a57"
        }
      ],
      "purl": "pkg:npm/batch@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "964b3e9550bc7601b287dee3c6fc5e61359016f878bb0e320b5da0565eb70a0df4b233d7e30b8671d9080955c30044abe8e2468ea180f08cf99a478deb3943ec"
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/depd@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06f13f4f0a595f8157131c4ec59c9119042feb9d4c4b09962991aabe63dc4488c3a96b9bebb9132ae20cc78ddc659ad2fdc041cf005c3435a8171b765c4148a5"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a9677ccffa34f53c8ec8f277a6257e002a6017d3bd199183d5595fc068a4c997eb570931b255d0b56b848bf11510604c24fdfdf8657f144f290debc170aea00"
        }
      ],
      "purl": "pkg:npm/statuses@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs",
      "version": "0.3.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18980b4d9eef61bfc9b4f492675d21b0e608bc462c8db354fb33dd20771469654d5043e2bf3c64bb7d7ceb9b124ae7740dad16e2511e38f966c3ddf32d0721b9"
        }
      ],
      "purl": "pkg:npm/sockjs@0.3.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs@0.3.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.11.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b36c297095702e891400954c9fa8f82f3e834a4dc9133c67f0655e1974085570fda587d294c498366f91a413b5db8ca4376099d0f73e83f67b4b02507eb4ff2"
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.11.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.11.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "websocket-driver",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f5eca783210563bdbd2cb2e4831767185d28368b3b65889e01f5676cb81e89f79daa08f2a69d5ab80f25b99a8b489971c30b57014ffd547b3ac956c2b0e738e"
        }
      ],
      "purl": "pkg:npm/websocket-driver@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-driver@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "http-parser-js",
      "version": "0.5.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f55ec3f2deb5d5c65ab1562a0459d0bed3e33e490c340e92729f0b4e3e8d57f9996f7734cbb430482499434139f0648149ad94b348698839474ff2dbbe4a02f"
        }
      ],
      "purl": "pkg:npm/http-parser-js@0.5.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-parser-js@0.5.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "websocket-extensions",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa79d3c818e7ec0e5a37d5437061b08531268ef66f46ff47da2078f9fdd6450cc16a3d3731e94c2ac8ecb708e11a10e83ff55b0622976a9fad96e4a868292a6"
        }
      ],
      "purl": "pkg:npm/websocket-extensions@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-extensions@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "8.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8d62cd9078c5b2f865853849bdc679fa1c20e9d25ed0043ee697cccb52627ef77439345d0da1c12b9f09139175453625f7fdfa42e9a7d2f0385bfe0cfb47b7a"
        }
      ],
      "purl": "pkg:npm/uuid@8.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@8.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af8ea065065057e2a5f6822dbe5d49659a89286afea04901d3c03a07392247be7ddffec86edba77171ddd98a18793b06e35e7b66cb0cbbd298bd41cb723703a0"
        }
      ],
      "purl": "pkg:npm/spdy@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdy/-/spdy-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdy@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdy/-/spdy-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handle-thing",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f509f8c81c5e971a21d8ec3ada73fe29afe4327397462f015e745a5307b32cd86a7a59cde3dc4acf817f74f3fc3982f12f1aba243b596f68bd5f39d441b34f4e"
        }
      ],
      "purl": "pkg:npm/handle-thing@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handle-thing/-/handle-thing-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handle-thing@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handle-thing/-/handle-thing-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-deceiver",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e6a4e1b14df6e982d195c49ae3e64edab171c280d669e672dfa7e85673c41046ab5bedf532ea4458dc13b587d75d17ac883d8500460c463b0078d839f121a37"
        }
      ],
      "purl": "pkg:npm/http-deceiver@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-deceiver/-/http-deceiver-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-deceiver@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-deceiver/-/http-deceiver-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "select-hose",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "984ba068b2be61f9228c1e1fc747ba9089ae25d088b762f109171b1183ea4460ace05da88327d953920065176308ff093ead80b5d3680bf0eec7adddf4a8abca"
        }
      ],
      "purl": "pkg:npm/select-hose@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/select-hose/-/select-hose-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/select-hose@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/select-hose/-/select-hose-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy-transport",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c2d5144e528c0e930a2b167895c52a788618ea4180c2e67ab7ced9a0b2094e6cee727fae901ea6a98589fbff1826d26ee7847802499e6490dab282fe0f0573"
        }
      ],
      "purl": "pkg:npm/spdy-transport@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdy-transport/-/spdy-transport-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdy-transport@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdy-transport/-/spdy-transport-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-node",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f4348b90a674ef14301336e1cde6ba0fc12046f37ac5b2e3be3175c7f7fdcdd5e15b9f8c1c3e3b6dbe330b10f589d11194620404edc1a04b7b4dc5ba8218cee"
        }
      ],
      "purl": "pkg:npm/detect-node@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-node/-/detect-node-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-node@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-node/-/detect-node-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hpack.js",
      "version": "2.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc9c557a151d30620ab1168db7b6a93b61aaa7405da96e726a21875d799ba6fc600585599c0aa5f8125be113b969dd8c8296d92a7e46ea73277a0ac7d4570d61"
        }
      ],
      "purl": "pkg:npm/hpack.js@2.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hpack.js/-/hpack.js-2.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hpack.js@2.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hpack.js/-/hpack.js-2.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "obuf",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d7d70bb402601d3ea38bd665a1aa694e77c90e219430199c3aae1eee6f2f5f4dce6585a39614b5f723a47586b17d937cd4638d1eea282c2c69035caf762c936"
        }
      ],
      "purl": "pkg:npm/obuf@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/obuf/-/obuf-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/obuf@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/obuf/-/obuf-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wbuf",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bce103a7af489cb1b1462d2d0eddb23916cc31cd1afcfe01f05a40e5405b248523ebc905efad33318f118fe3e8966286ae2e806f7c3a64ace6ae67ed226690c"
        }
      ],
      "purl": "pkg:npm/wbuf@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wbuf/-/wbuf-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wbuf@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wbuf/-/wbuf-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52d25c003e3211a1ad8cf7b35ae3bdc02e27c149d51fff3f226df210740fe1bebb717943fd0afd85d213094d710db4845e0d9728d68ff23b11795eef41dd34fc"
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-middleware",
      "version": "5.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "055753aa186cfb421fa1e01fec4a07e5613e7b10a6a867ab1df0ccd082f4f7a3f1eb44ead8c9fd3006e768651ee8788c6b8d4a302605d7d832cd998172afe8e1"
        }
      ],
      "purl": "pkg:npm/webpack-dev-middleware@5.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-5.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-middleware@5.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-5.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "memfs",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5044732ecc7396572169dbdb3ece5aa251e1eb9212a4aa4cf9c70b6ce27cfefbe904a98059ffa56bb757172eccaf4c921db747ac5bf99061425071dee861449b"
        }
      ],
      "purl": "pkg:npm/memfs@3.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memfs/-/memfs-3.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memfs@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memfs/-/memfs-3.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-monkey",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f514c7f07ad20aca60b47a2a16ee64f2c22852404e282f3427d5d07aad90797f1ff736934474059e092301fbad3f01e4f44c25ecc730257185441424c092c5a"
        }
      ],
      "purl": "pkg:npm/fs-monkey@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-monkey/-/fs-monkey-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-monkey@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-monkey/-/fs-monkey-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "8.18.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44a5b668964c5de3315699d9e9b724f91b30ce76b19b37542e206be8a63b5e44e75bcbafb74893f47e43907502857adcfaebabcf06b4ad5235ea7fd7ce3773d7"
        }
      ],
      "purl": "pkg:npm/ws@8.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-8.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-8.18.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-html",
      "version": "0.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a336d2dcbb9e9c757135187fc1d9cdd7a41aa541f36aea92a26025d63c3025146c1b0170b63eb8e25221c5f5aed05cb469c0a28f6f801201ef8ec72addd9555e"
        }
      ],
      "purl": "pkg:npm/ansi-html@0.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-html@0.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.9.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/ansi-html"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ansi-html"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js-pure",
      "version": "3.41.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef51b3a7de93f583e4eb7694bc4e50e6a3fe0ebc81e199685193d239e6c633cf15370f1535fbdd03bcfa90603c8863931330289ac462769e235d2994209b0bf9"
        }
      ],
      "purl": "pkg:npm/core-js-pure@3.41.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js-pure/-/core-js-pure-3.41.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js-pure@3.41.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js-pure/-/core-js-pure-3.41.0.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19"
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287"
        }
      ],
      "purl": "pkg:npm/stackframe@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "977062914c6f3ce727e44ef87598aae411ac4dbe7213085a4d2cdc714eade2c0ce1fc356242b2d28ee504f60afb45a0ae85d2c68bee9f711c0a873a508f27280"
        }
      ],
      "purl": "pkg:npm/source-map@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "webpack",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ce04e2b6e79c1f43182e52d6b620d2a4ccf8fa0084ba89a7d96226261e7e96de91e5c9c491465bd62827cb0c6d747d77cb5aa1370c91e04543b225898045aee"
        }
      ],
      "purl": "pkg:npm/%40svgr/webpack@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/webpack/-/webpack-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/webpack@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/webpack/-/webpack-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-constant-elements",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35cc36245b0956ebdf46c6b69521e20b9e641134152d29ec6064352430f09147961932fff13a26f1a2d39e5aa0a1eba8a56adb6c69ddadcf4094b62b228b2ba3"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-constant-elements@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-constant-elements/-/plugin-transform-react-constant-elements-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-constant-elements@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-constant-elements/-/plugin-transform-react-constant-elements-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-plugin-utils",
      "version": "7.26.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "452fa365c45d65d445ccccabfb072c6aa3a695dd7f12a4e085f68119041dfd69d1773765bd267ffe417b53c5504f17f5ca767872351c6208d51b1d777b034f32"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-plugin-utils@7.26.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.26.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-plugin-utils@7.26.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.26.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-env",
      "version": "7.26.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd7dea3c613cb04284019096934e64ddca53004dff9ce61c6bef8903e45dd33d8d08dcda6e662f12249284ace6d74cddaae3880155eccb6122fc34d6df82a529"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-env@7.26.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-env/-/preset-env-7.26.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-env@7.26.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-env/-/preset-env-7.26.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-bugfix-firefox-class-in-computed-class-key",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6644725644e1b7143f27a9efdc9158bf545863e253e41bd4d32de4e5b5ab9ae1b8c285f2a516b83d79a6f5184ec28751918156a82d02d1ca9c2783aa47b916fa"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-bugfix-firefox-class-in-computed-class-key@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-bugfix-firefox-class-in-computed-class-key/-/plugin-bugfix-firefox-class-in-computed-class-key-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-bugfix-firefox-class-in-computed-class-key/-/plugin-bugfix-firefox-class-in-computed-class-key-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-bugfix-safari-class-field-initializer-scope",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32b1912d9c4b0ff6638f481d535e5d7ecf871ff397be7c3f5388c90fcbe970fd822506a93c4bf5216c2373fa8c83b22d0653f04afd614416dbecb7ae00d75c9f"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-bugfix-safari-class-field-initializer-scope@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-bugfix-safari-class-field-initializer-scope/-/plugin-bugfix-safari-class-field-initializer-scope-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-bugfix-safari-class-field-initializer-scope@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-bugfix-safari-class-field-initializer-scope/-/plugin-bugfix-safari-class-field-initializer-scope-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-bugfix-safari-id-destructuring-collision-in-function-expression",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "daa530c1f005a492d9ab1774d985bd6ed50264797e445bdd0e435f67068826bbc1f137ac8ec93ca444244ef1b06572ea5d4c7fda8c98df2491866e87397b82ba"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/-/plugin-bugfix-safari-id-destructuring-collision-in-function-expression-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/-/plugin-bugfix-safari-id-destructuring-collision-in-function-expression-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-bugfix-v8-spread-parameters-in-optional-chaining",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb15a02d94c95f08a556396757ba2ca48df18beb25f2537cad75db043eaf627dd4603946b1a83cc2b66429c488f06e8a82a28feef34568381e0e77c0001abad6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/-/plugin-bugfix-v8-spread-parameters-in-optional-chaining-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/-/plugin-bugfix-v8-spread-parameters-in-optional-chaining-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-skip-transparent-expression-wrappers",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b80eedc115ade0bf287380f727b6b903819cd06aaeaea33cdca466ce3b538425a23e10976a5883132e016041fea5adf883168e4553e07129ea48f51999a9a84"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-skip-transparent-expression-wrappers@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-skip-transparent-expression-wrappers/-/helper-skip-transparent-expression-wrappers-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-skip-transparent-expression-wrappers/-/helper-skip-transparent-expression-wrappers-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-optional-chaining",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e80bd5d05b0b50b6e99d77818eb638766585f05ee07fc427bd31283bfc17ff9c66ff11355e8f283ee0f730f4be292f5ff5704401637b5f5696af8cfd1dd3abec"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-optional-chaining@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-optional-chaining/-/plugin-transform-optional-chaining-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-optional-chaining@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-optional-chaining/-/plugin-transform-optional-chaining-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-bugfix-v8-static-class-fields-redefine-readonly",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68b9cc5d83e7cf0c2a858482c977ca908918809f33bfd44afaba28f439135f3dfcca722177d5c26cdd3cb37306bea2f631819550675140b2ff26a04878984906"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly/-/plugin-bugfix-v8-static-class-fields-redefine-readonly-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly/-/plugin-bugfix-v8-static-class-fields-redefine-readonly-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-private-property-in-object",
      "version": "7.21.0-placeholder-for-preset-env.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48e4a47c90dd75a33b99a93a70f129b30c93467b9196d978dbd84cada4048255be3a4a2f9c2cec8accd39acae563ffea2c58c2a500c546f8dd9b6c00e693e6f7"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-private-property-in-object/-/plugin-proposal-private-property-in-object-7.21.0-placeholder-for-preset-env.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-private-property-in-object/-/plugin-proposal-private-property-in-object-7.21.0-placeholder-for-preset-env.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-import-assertions",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "402593e4787cdf484ae4441aed7ceea8891053db53ff086a6c3cfb92e699307165d629d1460ec99ee004390d14af441497436e7c29359ac2b605e63bf408ff7a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-import-assertions@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-import-assertions/-/plugin-syntax-import-assertions-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-import-assertions@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-import-assertions/-/plugin-syntax-import-assertions-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-import-attributes",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b676db5db09d594e98b707d51818bc38d6189f02e6e0d7d02d0aeff623f17540d55c94e06bd5d6294dd99dc99f385e2cf8dc14bfb4252430064d2efd763e2f8"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-import-attributes@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-import-attributes/-/plugin-syntax-import-attributes-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-import-attributes@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-import-attributes/-/plugin-syntax-import-attributes-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-unicode-sets-regex",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef6ed890400fc122104efe629bc407cf7ba9aa9f762535a189d202f354ddc78549608b5efd59dd29fd6a2ab7e79e13cb88f8214ad59fbc2fe215a30242eecdaa"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-unicode-sets-regex@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-unicode-sets-regex/-/plugin-syntax-unicode-sets-regex-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-unicode-sets-regex@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-unicode-sets-regex/-/plugin-syntax-unicode-sets-regex-7.18.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-create-regexp-features-plugin",
      "version": "7.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bb6516f8d2e52074a390a8f2e37c3d76666180e783f3a83154bf604a2269c2f5021f1a12072af54c2f4a0df085220eae2246aa6aef8001a6f39a7ab7d67689e"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-create-regexp-features-plugin/-/helper-create-regexp-features-plugin-7.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-create-regexp-features-plugin/-/helper-create-regexp-features-plugin-7.26.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-annotate-as-pure",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82fef7db4281505273d519f294883959660f457299f3ce001a4629829596d364c7eba0e5f87682d6dd4229dd33dd1e1bea175811c9ab3591d499f08ffb5bb7fe"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpu-core",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fae813d032bbfe575eadf31b66abe502d02069893040eb457c89b4b541545e229f13d73f21c05c6a706ce6f4aea582c37bb01e5e7551fc6becdee85aa6e3078"
        }
      ],
      "purl": "pkg:npm/regexpu-core@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpu-core@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerate",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ceb71e47f5e119853f77fa29af610a3bb6911d47a2048f2a8ed7c7a800d3c1977a4b37f2d7a95aea4a83d0c214b39cf9871e8068a6be3e2c693eb476f3df88d0"
        }
      ],
      "purl": "pkg:npm/regenerate@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerate/-/regenerate-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerate/-/regenerate-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerate-unicode-properties",
      "version": "10.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ea1e7dc3c1b9a63d5cde2a3f70a0169daa65f12ef428408c2eee7a2931cef6cedbf1566564d920614a7c7aef3bb27b94cffa526c6ff4c142c8cb2a19c37f730"
        }
      ],
      "purl": "pkg:npm/regenerate-unicode-properties@10.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerate-unicode-properties/-/regenerate-unicode-properties-10.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate-unicode-properties@10.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerate-unicode-properties/-/regenerate-unicode-properties-10.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsgen",
      "version": "0.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46fc2d19edddecbbd6883417790c3ca796ac65499f5351bf97a59b517787b5aed8d8f108bc14f01fa13611f99850af29c5cc4474499aa26ab2a74bd967b0bedd"
        }
      ],
      "purl": "pkg:npm/regjsgen@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsgen@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsparser",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72713ecbc6f3e0d84c8c848a6e079526da8d6ed7f94298d93fe06c968f94aa422df503e75fdab4f797a2451012246d7fb73e9d94dafa67936c062598a24a7a11"
        }
      ],
      "purl": "pkg:npm/regjsparser@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsparser@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.12.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/regjsparser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "regjsparser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4aab3cd65c3b6d26e39c6b006de0a9ca1c721fe6843f0b16b1fb43d6146f83143807340762f935c40800c8f91622154326c7cefddb1b0c6db8178f80b09cfe2"
        }
      ],
      "purl": "pkg:npm/jsesc@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/regjsparser/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-match-property-ecmascript",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e646990ab6e9e6699bcf9ba50640e46d8d12b0f3a32aa552df95692fdba530f7d29742745ec9bef44be986ff42a08645c2b7bb689a1af78018eac78c28654de5"
        }
      ],
      "purl": "pkg:npm/unicode-match-property-ecmascript@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-match-property-ecmascript/-/unicode-match-property-ecmascript-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-match-property-ecmascript@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-match-property-ecmascript/-/unicode-match-property-ecmascript-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-canonical-property-names-ecmascript",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "740f166cd79bd9aea8433010e796254f9bd0016195f565ceb22dd2b241376dc09d3343f848377edb8cd2fce09a71d46ae4191db118fdab73e0e98c90a31206aa"
        }
      ],
      "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-canonical-property-names-ecmascript/-/unicode-canonical-property-names-ecmascript-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-canonical-property-names-ecmascript@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-canonical-property-names-ecmascript/-/unicode-canonical-property-names-ecmascript-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-property-aliases-ecmascript",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eadddfa13408f6a9def8e66855007ff31f2b936935795cb58115e1577a054394fa47576a435c6d8a7dd7a92971dfe0130649624da47f847c89066f8b54f34cf3"
        }
      ],
      "purl": "pkg:npm/unicode-property-aliases-ecmascript@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-property-aliases-ecmascript/-/unicode-property-aliases-ecmascript-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-property-aliases-ecmascript@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-property-aliases-ecmascript/-/unicode-property-aliases-ecmascript-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-match-property-value-ecmascript",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e087a137757ffa492be587924830d01bc40ba8edba5e92f65cfdc642dab0953fd0612102030173b715478e56e1d3e8232775e634b4b4cc3b1b82cf6358a1312e"
        }
      ],
      "purl": "pkg:npm/unicode-match-property-value-ecmascript@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-match-property-value-ecmascript/-/unicode-match-property-value-ecmascript-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-match-property-value-ecmascript@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-match-property-value-ecmascript/-/unicode-match-property-value-ecmascript-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-arrow-functions",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea39a8a17608c27f5c6b9fd1ca56400c9f849d2c55512e6c8de27d50f93a4564735c298e242cba76a22d3c9169c3672e09a9e03cae0e62be6e84629c9ab9b942"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-arrow-functions/-/plugin-transform-arrow-functions-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-arrow-functions@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-arrow-functions/-/plugin-transform-arrow-functions-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-async-generator-functions",
      "version": "7.26.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1def448f65fbb4d7f6cdd28c0063ac9a0d8cac573e85fa0085dde9a387167e8fcd5a3cc400a6b4a10aee8f544e554765d1ee9f6fafe413f1b7492c44d254493a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-async-generator-functions@7.26.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-async-generator-functions/-/plugin-transform-async-generator-functions-7.26.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-async-generator-functions@7.26.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-async-generator-functions/-/plugin-transform-async-generator-functions-7.26.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-remap-async-to-generator",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "219b6e92e51e05b86039c696dacd3a3974f354d251d326e6e16e710b5a295851493196f0463e4b0a4f81c981fb59d64f653b7c2a717003ca6f8cddb2a9c3e583"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-remap-async-to-generator/-/helper-remap-async-to-generator-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-remap-async-to-generator@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-remap-async-to-generator/-/helper-remap-async-to-generator-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-wrap-function",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "113cf3f544e34124e6c37f466e86ad772983ab85c841b47cc92815af295184f385a6c77e26b28722e17475eec609699e9be4f8b82e73ec4660ba877b5a3e00e2"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-wrap-function@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-wrap-function/-/helper-wrap-function-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-wrap-function@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-wrap-function/-/helper-wrap-function-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-async-to-generator",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "353ec48e7ed9fcb8d41f41afe4ab010b187b047ddf6cb4d5d29b47be978cbebb7770f4e11df25fb2df56adbed2f04bc9eef453148ef3f9502f1551109ff9b9cd"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-async-to-generator/-/plugin-transform-async-to-generator-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-async-to-generator@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-async-to-generator/-/plugin-transform-async-to-generator-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-block-scoped-functions",
      "version": "7.26.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "721b93498fa1ab4f7efdfe65323f19498802169a6957609b62b84d149d411685e98963e79c06fb47432aada7c2a4df04d7e611aed33531764725d231f01eab31"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.26.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-block-scoped-functions/-/plugin-transform-block-scoped-functions-7.26.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-block-scoped-functions@7.26.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-block-scoped-functions/-/plugin-transform-block-scoped-functions-7.26.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-block-scoping",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d45d393bb0188f2980b6a6ec1444dba0dd4dbc175c9f331eacefb394cc89044cfa5a431d7a3bc65b0f69d398934a30bce512e506c7871d0a5868ce20cc99011a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-block-scoping/-/plugin-transform-block-scoping-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-block-scoping@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-block-scoping/-/plugin-transform-block-scoping-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-class-properties",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6db300208f0645291c7748746f85fedfa1a4b31ba178b1633fae6e97dc3a0b72a001a988dc9a84acd812ae8b17e993e3f8ca629b956f11b6b05f1242c84515dd"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-class-properties@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-class-properties/-/plugin-transform-class-properties-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-class-properties@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-class-properties/-/plugin-transform-class-properties-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-create-class-features-plugin",
      "version": "7.26.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9b6d4a82a1fbf13d1babc392fc593b022d2910895a68bf8431d16300fa350dfa75c12bc0033e524ed60ae4170e4258a0b9fac65239fb8631d5f5688d624fd4a"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-create-class-features-plugin@7.26.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-create-class-features-plugin/-/helper-create-class-features-plugin-7.26.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-create-class-features-plugin/-/helper-create-class-features-plugin-7.26.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-member-expression-to-functions",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1b7dd67dc39be4d02d28c87a8025b73adbebdeb79a6b8e3d358e327cb0a9f78fd8773104257e511d5d8beea915a31e7335d9ca0312a882d484428b453f10ac1"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-member-expression-to-functions/-/helper-member-expression-to-functions-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-member-expression-to-functions@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-member-expression-to-functions/-/helper-member-expression-to-functions-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-optimise-call-expression",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "148a6e35acf9a30f15cab61c9d74130d11af57ab538e436d08afd160d0d71922e5503e9c06e4134b0e37092846c63bdf0537dc500febe9485409bb58aa485cb9"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-optimise-call-expression/-/helper-optimise-call-expression-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-optimise-call-expression@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-optimise-call-expression/-/helper-optimise-call-expression-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-replace-supers",
      "version": "7.26.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c9ea22157585f5628a18d97ef0d6ae95213b7e2e75082ed364ef34fbf3292ec12b71f016ae0b3c6f16a15a1e33a95b56d59d250cd4f3757f4a793f6d701f1be"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-replace-supers@7.26.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-replace-supers/-/helper-replace-supers-7.26.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-replace-supers@7.26.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-replace-supers/-/helper-replace-supers-7.26.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-class-static-block",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e89d803d3b3b0430e6f9432a3f5bac796aa1711017a34588a158f6e8dee43c507a4bbdcb82fca46b8293658231b6061788de474f244e6c0ef63768aeeb6f224d"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-class-static-block@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-class-static-block/-/plugin-transform-class-static-block-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-class-static-block@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-class-static-block/-/plugin-transform-class-static-block-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-classes",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "983f003c85e6b1e13ba19bd98060010f2337e065262b8e549b64d788152decf9ee031ae0a1255fd76dea5333f112bffefc11eb467e4d31909d1369bfd45f031a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-classes@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-classes/-/plugin-transform-classes-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-classes@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-classes/-/plugin-transform-classes-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-computed-properties",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e705e806a97651d76c5b7131e527d1c6c70d4e9e296d4f6e89e58a5faee1aab541e5cffc4a7ff1b66a4f5efadd2b56aae35daf563a1bd83f3d4445f323db700"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-computed-properties/-/plugin-transform-computed-properties-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-computed-properties@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-computed-properties/-/plugin-transform-computed-properties-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-destructuring",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a40866ffdd9c577a998c897d74d679c6894fb508076eb7ca07c84387c642ae4b5a8aa54d92317136b92bdfcfc3c1b8b778f55e8b12c6edc8f8560bb7e7920bd"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-destructuring/-/plugin-transform-destructuring-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-destructuring@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-destructuring/-/plugin-transform-destructuring-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-dotall-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7b650ee0e6dac8812458848f69209b5197ae0a1e8b6eb5426c8781337b997ba2526ffa6452838fcc99b674b6fd5e7aa45b76fa3ffadaef243fce7390e65b670"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-dotall-regex/-/plugin-transform-dotall-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-dotall-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-dotall-regex/-/plugin-transform-dotall-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-duplicate-keys",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d9c6127a76f05bfdfdf1f31c1622eca2007cb9ea7ad11b73de613a41924ce4611450ead24bbbaf25105e5522a314662015edaf3e4dbefc9c4a0c08c72a8d707"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-duplicate-keys/-/plugin-transform-duplicate-keys-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-duplicate-keys@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-duplicate-keys/-/plugin-transform-duplicate-keys-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-duplicate-named-capturing-groups-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d147ee252d04b176d1bca9f070b8c5b49cbf4b17392798e12c79c5872eeee338a1f7b1f3ead2642d4f8ef8530cacd66ba2c50fc438bab18c49fc403c8c3880a2"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-duplicate-named-capturing-groups-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-duplicate-named-capturing-groups-regex/-/plugin-transform-duplicate-named-capturing-groups-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-duplicate-named-capturing-groups-regex/-/plugin-transform-duplicate-named-capturing-groups-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-dynamic-import",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1828208dec5b9922da161aaca237ae801a5e69122058d4dc80a56aff4a88b5e144a98d80f9bf5089d61a76b5a59db59052b5b97e7fa60af7f7b6bece781153ca"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-dynamic-import@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-dynamic-import/-/plugin-transform-dynamic-import-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-dynamic-import@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-dynamic-import/-/plugin-transform-dynamic-import-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-exponentiation-operator",
      "version": "7.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec2007710e7ccf6721b973d66e59e7d4aeab2c39c35a27a08523849aa42cac17a71f43fd227094b4e2580fcf69be78258e666525ccf77dc9a062c5c53466b565"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-exponentiation-operator/-/plugin-transform-exponentiation-operator-7.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-exponentiation-operator@7.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-exponentiation-operator/-/plugin-transform-exponentiation-operator-7.26.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-export-namespace-from",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8db04cfe0b1cc921538fc76a3d52c5b5ad72eab4286d2e8567c181c7881d38c12e6c827ee6ad5e397d63015f42a4fae6fdb97cad5587cd3f61e36d56c20775b"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-export-namespace-from@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-export-namespace-from/-/plugin-transform-export-namespace-from-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-export-namespace-from@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-export-namespace-from/-/plugin-transform-export-namespace-from-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-for-of",
      "version": "7.26.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ebcbc02eb159bc2d6e41545822c9445eba81b33d4a5d1d042a258e5b6676db7fe9e03875ae0ae6052b0fc1a9a69696f114ac5f751cc843b44688d6167335b2e"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.26.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-for-of/-/plugin-transform-for-of-7.26.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-for-of@7.26.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-for-of/-/plugin-transform-for-of-7.26.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-function-name",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f253fe6318efd7855ce4cb9606926ca1409dde10fa57d0e00689f615560be232606e7550f5f4e0626a27721cd924e54d8331206f1a783b001feb1cfa33fd785c"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-function-name/-/plugin-transform-function-name-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-function-name@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-function-name/-/plugin-transform-function-name-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-json-strings",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c684cc93459771e8a222fb1aaae41051a2cb5d25b5289d79f4a3fced58a5aee426d0b34d1b15b36a1c524ba4fa8b8660ddece9e2f038ceec22354479dea99003"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-json-strings@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-json-strings/-/plugin-transform-json-strings-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-json-strings@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-json-strings/-/plugin-transform-json-strings-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-literals",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4defeda5173896f16f69065d93cda361b77fa980c2113fbe338b37824abb6748a55d525f260238ce3f638e55001f67cf353f670d8c38f5b8030475e0f9d27b9"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-literals@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-literals/-/plugin-transform-literals-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-literals@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-literals/-/plugin-transform-literals-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-logical-assignment-operators",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c08e30440cc6928e79d58f1e55fea2398f44a2e2034ed3dbd01c99c7e92d0c61f0bfa6c71629ab80933fd93d36d6dc4f676b3873b6eabc76ddfaf5c6e8af78f1"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-logical-assignment-operators@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-logical-assignment-operators/-/plugin-transform-logical-assignment-operators-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-logical-assignment-operators@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-logical-assignment-operators/-/plugin-transform-logical-assignment-operators-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-member-expression-literals",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d86b30557e87c242490cce1d8fe8874851a0845a78b789811eac0b115ae55df3e8e53354bd4bd733d5d17d848cf2a19f08037f8ec15608a7dbfd7be19b81984"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-member-expression-literals/-/plugin-transform-member-expression-literals-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-member-expression-literals@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-member-expression-literals/-/plugin-transform-member-expression-literals-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-amd",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8394f5d6d9c8dfa8d50a5425325b78a8a0cb9569c6e693fd0923381a17517224cd3118247e9a39711e9be2b1883983e0451b8502fc233d0fd893eaa5e1dca16f"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-amd/-/plugin-transform-modules-amd-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-amd@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-amd/-/plugin-transform-modules-amd-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-commonjs",
      "version": "7.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "320479e65e2af4a75d503213133105627e59b060d7312b14f44fa487b7e34574c80b7447a9f0a8f113d16f245e609878e0743fca898592a6ce168857bc30a221"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-commonjs/-/plugin-transform-modules-commonjs-7.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-commonjs@7.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-commonjs/-/plugin-transform-modules-commonjs-7.26.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-systemjs",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "872b2cee22251ffccb1da7a14fec708b29ad3cea6c8b02084650803b0041d38b5ae53b7e94d22d0037655f0de301667de952768e5865fdcf8f34840f28d7ef70"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-systemjs/-/plugin-transform-modules-systemjs-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-systemjs@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-systemjs/-/plugin-transform-modules-systemjs-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-umd",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d2f4c54e6d4804ef0c37e8711fc1eea0f566a4434285d3b99017be2eb97764a338943df2b2bbf9c89baeb7933fff7b93b59cf2273c5c77eb3ed6266278c8d13"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-umd/-/plugin-transform-modules-umd-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-umd@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-umd/-/plugin-transform-modules-umd-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-named-capturing-groups-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2a07a58774a4c6977abf22d421a4b4a75963a98d424bb0e08b57278581e4e4b640520a2babbcf3accadf778226c8f429ae2af4d412d5a61b9561643fb94ff28"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-named-capturing-groups-regex/-/plugin-transform-named-capturing-groups-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-named-capturing-groups-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-named-capturing-groups-regex/-/plugin-transform-named-capturing-groups-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-new-target",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53fde9f17d72092a0ac948f678e048c7714e9faa4494538abc00067fc1d3b48b6e3f207e65e3aa7e7fa6bd3b60f5994e023b0f74addac90123a878d4ff22de55"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-new-target/-/plugin-transform-new-target-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-new-target@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-new-target/-/plugin-transform-new-target-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-nullish-coalescing-operator",
      "version": "7.26.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08a5bc56efae5199de4023ed5e6481502e8d08051dc9adba8560849405a1e6655295246c9a208f5140ca6f7674b339e0d6188025ad3df0792183da38484df943"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-nullish-coalescing-operator@7.26.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-nullish-coalescing-operator/-/plugin-transform-nullish-coalescing-operator-7.26.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-nullish-coalescing-operator@7.26.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-nullish-coalescing-operator/-/plugin-transform-nullish-coalescing-operator-7.26.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-numeric-separator",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e5a6bac9d46059debeacf7a62af20110bfcdacf3fe479c2547b442527148fdd2d84741bc1ef84e4c2e18b66db34704426ecebbe5b574abbbe054c470e8a20ed"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-numeric-separator@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-numeric-separator/-/plugin-transform-numeric-separator-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-numeric-separator@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-numeric-separator/-/plugin-transform-numeric-separator-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-object-rest-spread",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d269769f104f425473f078b630e09d1e9a9d6df336135f2ccddd4b86fa5ca5aa4bd877b44caec390f13631e51176df56ded2faad142ea39f1dd49a926628162"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-object-rest-spread@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-object-rest-spread/-/plugin-transform-object-rest-spread-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-object-rest-spread@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-object-rest-spread/-/plugin-transform-object-rest-spread-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-parameters",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c33cfa30ac299ec8410224669f88d1f0b633fe0f0ab20d28f345e6c190e5a2b763c0493d4b10734d60bb17979fd6385badb396d8327927a6b246e92b2669ebd2"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-parameters/-/plugin-transform-parameters-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-parameters@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-parameters/-/plugin-transform-parameters-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-object-super",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a3fc687e470d9134b6c22b55405a3d94e3ccb1c6a2f6c74935d273ed49d45ad0edb19c75da943d2cfa8d40e9ad16e37809d3400da37f23c6442b79c90ecefe4"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-object-super/-/plugin-transform-object-super-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-object-super@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-object-super/-/plugin-transform-object-super-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-optional-catch-binding",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8cffa9ba8506730dc645de89f322165e0c70cee376e434d94e5f48bc9f7951eb32dbbb418dd9df2a7ccfc811125961aba100748b1f2dfd345d02b5dbdc89dee"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-optional-catch-binding@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-optional-catch-binding/-/plugin-transform-optional-catch-binding-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-optional-catch-binding@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-optional-catch-binding/-/plugin-transform-optional-catch-binding-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-private-methods",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ff254a3336940b00f515bacbea331caf8f396545a17cfe74ab3f5b36606413fd6e0b1cae31c6c31c1e384e1934b4d66a7d1dd6bc9ecc1bf856e52dd268ae743"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-private-methods@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-private-methods/-/plugin-transform-private-methods-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-private-methods@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-private-methods/-/plugin-transform-private-methods-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-private-property-in-object",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12f7f791c32acd7037c5f609999f4f8353af29db6ab033125810f364e3cbbc7893b77e84ef98cb0d0a39c3582d454f794381393c3b6dad37f6e45c3c77fb962f"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-private-property-in-object@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-private-property-in-object/-/plugin-transform-private-property-in-object-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-private-property-in-object@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-private-property-in-object/-/plugin-transform-private-property-in-object-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-property-literals",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22f214795e4aad2fd53dabdf48cfc8bbe444ea596b1eb608298d727c2cf23bf94c5c743ea7bb868689e61958acbfab520525605b3301a214dcbe40bdbd071014"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-property-literals/-/plugin-transform-property-literals-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-property-literals@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-property-literals/-/plugin-transform-property-literals-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-regenerator",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf00dc0cdb2030f0c63f49ccab36a10d6139fcc2dc5fcb2ff7afb07d7edab3b2e817f92bf7b068ffb7c8d34957638c145d87d59b0208c86f347c6675bafb76aa"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-regenerator/-/plugin-transform-regenerator-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-regenerator@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-regenerator/-/plugin-transform-regenerator-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-transform",
      "version": "0.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85f329d81a05d2a3a4dee739576d002c60d2d9d76341a2eb765ef1ac65ef008a30eea79644cd950361ee0879142a4f6c96add5c04c0b34adc3141a837cf198b6"
        }
      ],
      "purl": "pkg:npm/regenerator-transform@0.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-transform@0.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.15.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "runtime",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9624c79140f1ca48f7a6aa4fdac06ac08ae15fcc198e20f5ca8b302c561587f5826a2d9d07f874b873c9681c6816eaeb49dc4fde8d7414b2219a432d8d67d17"
        }
      ],
      "purl": "pkg:npm/%40babel/runtime@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/runtime@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.26.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7589e11e1d2726831f9e466ce869a684592700646b2f39cebb99dcf4c2fe109c46bebc7a1fbb5eb9ebea56a0ae3dc3cafffdde0ebae34217a15d5c7d72790677"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-regexp-modifiers",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcdeac69ac7b96b036c80fcf6a4dec0b1b83e85e489c18e7f4872b20a40f8e9b0bbee1d82d5ae84f18dd9554478e3056c4a3aa230a535c390eb2c613e0115d47"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-regexp-modifiers@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-regexp-modifiers/-/plugin-transform-regexp-modifiers-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-regexp-modifiers@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-regexp-modifiers/-/plugin-transform-regexp-modifiers-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-reserved-words",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec32fb0ca6239f94aefbee115eef29b8a666d9704f1f28d62d489d68f12409405b13b20f72cae444782000e38ac9d1f574049675c501c6b90e18dc54bf93f726"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-reserved-words/-/plugin-transform-reserved-words-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-reserved-words@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-reserved-words/-/plugin-transform-reserved-words-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-shorthand-properties",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "314bfab741613b9a879d2fd6f1709b1e689158ea6136e7e9135215c612b992e3774ddf454f5c78af1e0ae36b3745874c5c25e97d690649b09277467ae3103b36"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-shorthand-properties/-/plugin-transform-shorthand-properties-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-shorthand-properties@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-shorthand-properties/-/plugin-transform-shorthand-properties-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-spread",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0d927201d136d4454e69a891556ce385b29565ae9570a361f5f87508b150efa7955ab861833f5644bcef0d9f9c72304b3775a91a8cec659a4356ee43604a6e8"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-spread@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-spread/-/plugin-transform-spread-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-spread@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-spread/-/plugin-transform-spread-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-sticky-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5aa0544a0795c2e7180cff54ff135141a9bbc55f16e597fee84a3b4f649155416585188c345745cf9f2ed0a66609556ab368bb487829467021cd136629f8b6b8"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-sticky-regex/-/plugin-transform-sticky-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-sticky-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-sticky-regex/-/plugin-transform-sticky-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-template-literals",
      "version": "7.26.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a61832f9fc9d0224f2594c765b8b65e93b4b724f621aedfce95b919447076da765f77cc98df1abbf7a3ea9782fd3df7ffe091888a40f0aaec7bc845195993e5"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.26.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-template-literals/-/plugin-transform-template-literals-7.26.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-template-literals@7.26.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-template-literals/-/plugin-transform-template-literals-7.26.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-typeof-symbol",
      "version": "7.26.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8dfa135d7653806837e819a1a93ddc0182b9aa49aabc9a6f36b3e168aff9d95823870e11ab6f6cf54aa95965740facae466822147fc151596497deb3256aa76b"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.26.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-typeof-symbol/-/plugin-transform-typeof-symbol-7.26.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-typeof-symbol@7.26.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-typeof-symbol/-/plugin-transform-typeof-symbol-7.26.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-unicode-escapes",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b39103ac4e9b5bdecbb7139c1a3d4a85cc7901a5f088c9a2e2da055910cff7fcb45a8a3aa570be8b23eefcaba12ad7d2acd15dee3241fbf7e43ad672e9a202e9"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-unicode-escapes/-/plugin-transform-unicode-escapes-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-unicode-escapes@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-unicode-escapes/-/plugin-transform-unicode-escapes-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-unicode-property-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26dd9df066be430465bb1450df4ed59716ba74cad810c642806c683d1f15e76af13f295d1eede17651eca716aa62613ba080f9fa407e50a501fde592f839245a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-unicode-property-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-unicode-property-regex/-/plugin-transform-unicode-property-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-unicode-property-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-unicode-property-regex/-/plugin-transform-unicode-property-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-unicode-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca8c6cb63ed183d765367f54431ce4e1f70d8afc2fe27518cfb7d85c168ac6fc3f96798fb8e9bf8a4a042f281b62aebc065b370ff0fe3413c788bc197596781c"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-unicode-regex/-/plugin-transform-unicode-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-unicode-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-unicode-regex/-/plugin-transform-unicode-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-unicode-sets-regex",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0162a3b719e54d1edc7af5f74fb213777e7cd434bad6747864fe2712c22824b0919ccca4a2cd9f99e92042c53b3bdb716be5548da2b4c82bb6be476b484afc1"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-unicode-sets-regex@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-unicode-sets-regex/-/plugin-transform-unicode-sets-regex-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-unicode-sets-regex@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-unicode-sets-regex/-/plugin-transform-unicode-sets-regex-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-modules",
      "version": "0.1.6-no-external-plugins",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb7207081122e6f5a211f38db2849e5159a9ff81e6d0509e84fc4e7eadfd32f68ea88fbc3406bfac5ae2fa90443fa3f01d7ef47525ef631b5f3f827a708c4c8"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-modules@0.1.6-no-external-plugins",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-modules/-/preset-modules-0.1.6-no-external-plugins.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-modules@0.1.6-no-external-plugins",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-modules/-/preset-modules-0.1.6-no-external-plugins.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-polyfill-corejs2",
      "version": "0.4.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08f593e81c2f86b4ced9df10568ae14c2430f58e37ccebbb1bd1e281c7f1bdea4e53a6fca37b5c59a77aa1581922c6424ede36145bfdeda03b649b1b338fbca2"
        }
      ],
      "purl": "pkg:npm/babel-plugin-polyfill-corejs2@0.4.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-polyfill-corejs2/-/babel-plugin-polyfill-corejs2-0.4.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-polyfill-corejs2@0.4.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-polyfill-corejs2/-/babel-plugin-polyfill-corejs2-0.4.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-define-polyfill-provider",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1caec18be1e3e87f954c703766f062b3b57fea1bbd42e4eb9cc5cdc9b7d47f68a2b94fcdf7b23c56307e29b84517c46577f2f1e4cce80b03c2a4f8df2be9fc0a"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-define-polyfill-provider@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-define-polyfill-provider/-/helper-define-polyfill-provider-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-define-polyfill-provider@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-define-polyfill-provider/-/helper-define-polyfill-provider-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.debounce",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "153d720f30d81286168674869e913fe0a8f57cb6640c5caa45bedf36de85758392c6551602da78d8487a59bd2b188bff9bd060a3bc781a141b9b962ce121b9a3"
        }
      ],
      "purl": "pkg:npm/lodash.debounce@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.debounce@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.22.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34f472fbf9dc20c78395302cbaac0a2227deae26b085e7c526d90d496d2a64912a3046fea81b7fefb07f8c679e7a4f85d2e39e374e420dae875db6c882d557e3"
        }
      ],
      "purl": "pkg:npm/resolve@1.22.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.10.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.16.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51fa1e300e9f209f304d81445237a59da188ebbbfaf8deea5c912f42e2066bdf65e31b02aee498395490d2e3c0367e1d0339bc96460f68a2ebae28cbabbc76df"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.16.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-polyfill-corejs3",
      "version": "0.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c860aabc14f8af031cce8dbcc641ff9e8c49e8c6789c97e45587680da0bfbad2ed5ab5f1bf6ec756bcc07926ea47c4b10eca78ea7d18178ec46c7a22c72eab5d"
        }
      ],
      "purl": "pkg:npm/babel-plugin-polyfill-corejs3@0.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-polyfill-corejs3/-/babel-plugin-polyfill-corejs3-0.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-polyfill-corejs3@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-polyfill-corejs3/-/babel-plugin-polyfill-corejs3-0.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js-compat",
      "version": "3.41.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "445b14f4bc9256e7bd453c1d0d55ff4f47b663a8d16165c444a125223a6e10e127c5a5df7c8d17ed15305737d82dfcee2d748d24362845850099151cca59f6d0"
        }
      ],
      "purl": "pkg:npm/core-js-compat@3.41.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js-compat/-/core-js-compat-3.41.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js-compat@3.41.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js-compat/-/core-js-compat-3.41.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-polyfill-regenerator",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e25926e5e0245221ae71fc9014ea36621bd7a2b7dc3a9b3fb254c1700c4f372c05afb7401f181a19ec74bf9a486b2ae876665cdf55960aa0b8d776ac3a62ded"
        }
      ],
      "purl": "pkg:npm/babel-plugin-polyfill-regenerator@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-polyfill-regenerator/-/babel-plugin-polyfill-regenerator-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-polyfill-regenerator@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-polyfill-regenerator/-/babel-plugin-polyfill-regenerator-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-react",
      "version": "7.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "365d3777a4fd932e75e8318ad98331ad3aaf9e9516eb74e724c38ca278fe65a7b42623c2e410bdc4f3122fa2fc7e24a9039bcff3ca9fca06af550be72e9fba0b"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-react@7.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-react/-/preset-react-7.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-react@7.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-react/-/preset-react-7.26.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-display-name",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2897cc958214c500750897cedded3e87464758e4cb08f3f5d7903085acfc534669ab7e8697f717969a323119d45a584d50103395d9c288064dbc20e3ec2acac5"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-display-name@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-display-name/-/plugin-transform-react-display-name-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-display-name@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-display-name/-/plugin-transform-react-display-name-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b395f0a50602a867ab5e5f8fbba5432f7c748f677cd9e895efb509f1ada60c7016ee3f52591a90db2d5f368d59ef809d7188a9979678d73be38f835fceadfaaf"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx/-/plugin-transform-react-jsx-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx/-/plugin-transform-react-jsx-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-jsx",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95dea87b31d0319b197e9ea95ad6e368d0c5dad8a2098603a90b331ede55578dfb95ec0ff5a4a2d8e7fdf422b40f45c1db593b14b8272dc9902b22b3ca77de00"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-jsx@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx-development",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f668faae6ed7558b3899d2c8a5b6671ce61da56e36ba8881093568c20eec3f5b6150e88036031be14b69462bd1d29a7988bfa872f52fed7e26660151a491331b"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-development@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-development/-/plugin-transform-react-jsx-development-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx-development@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-development/-/plugin-transform-react-jsx-development-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-pure-annotations",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "290fd36a49374fc4338f94e9a644b56dee7cf2591b4e9e6e8fbc3a6b42de41a4cc49c914ff02b4a09fe98a1f93ebdd2d9202398df9a0d93a8326f778d528f50a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-pure-annotations@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-pure-annotations/-/plugin-transform-react-pure-annotations-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-pure-annotations@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-pure-annotations/-/plugin-transform-react-pure-annotations-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "core",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab9d9539cb093ef5778ced7090fb734ee2a5bd7ed8df121c591a4232d045dccaed79926d05f430ffebb4075047cb90a896941cd7f6154eb3c4b5260830d665ad"
        }
      ],
      "purl": "pkg:npm/%40svgr/core@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/core/-/core-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/core@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/core/-/core-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "plugin-jsx",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57fc15877de3d76846874e480e0f06a485176e300f9d374f4cab8fe1534b8209f068730f35035a7b6a519f24c020b58241dcf91b232ab4ee3cf20ec228cf0204"
        }
      ],
      "purl": "pkg:npm/%40svgr/plugin-jsx@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/plugin-jsx/-/plugin-jsx-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/plugin-jsx@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/plugin-jsx/-/plugin-jsx-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-preset",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e05897063bd0fb3da3ef20127863c48bc543ff9aeb1909385ebab711d266a19833feda6a0a1a68e618170ef9846aec2dbce739daaf2086164ae0ecbbaa98788a"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-preset@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-preset/-/babel-preset-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-preset@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-preset/-/babel-preset-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-add-jsx-attribute",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6457f682cffcffa07c3e74a87c8d229d85ebd920cd4c349c3d784dee4e44a83e1a677822eaefab6e6647541f08337c03cb1f27b4a00265bb574a6ee864646a56"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-add-jsx-attribute@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-add-jsx-attribute/-/babel-plugin-add-jsx-attribute-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-add-jsx-attribute@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-add-jsx-attribute/-/babel-plugin-add-jsx-attribute-5.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-remove-jsx-attribute",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9a4b8a363e052dc0b1464ca6ec880cba0f4a37ba07148562b4678e6e989eba10f5ae9c0cfd7ee170da026e8deeb0a90bd058e4c9bc86a15309dd3976fb4023e"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-remove-jsx-attribute@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-remove-jsx-attribute/-/babel-plugin-remove-jsx-attribute-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-remove-jsx-attribute@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-remove-jsx-attribute/-/babel-plugin-remove-jsx-attribute-5.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-remove-jsx-empty-expression",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c0ef6fbcf00d75343ff2148333cae2d148c27eb5129e60a790fa64770dc019e48e21e423d637d007c94cc96d6498a7fbb6bb4c619a039ed3e138d7e1a312e78"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-remove-jsx-empty-expression@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-remove-jsx-empty-expression/-/babel-plugin-remove-jsx-empty-expression-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-remove-jsx-empty-expression@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-remove-jsx-empty-expression/-/babel-plugin-remove-jsx-empty-expression-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-replace-jsx-attribute-value",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e8884e990f6122cb998af9f8c7ab018e4be2175f4c2afd80ed3722203ab73a7a3167c4de1bd77a51a6220f6ed3f01c473e353d8a0a3b5e01cab7dff17563d29"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-replace-jsx-attribute-value@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-replace-jsx-attribute-value/-/babel-plugin-replace-jsx-attribute-value-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-replace-jsx-attribute-value@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-replace-jsx-attribute-value/-/babel-plugin-replace-jsx-attribute-value-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-svg-dynamic-title",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd23991fc3dd64ea6e1b5655c7f70b55e3c1da26e8dd63e9aa8ee01488cb57d6b442cb90033262c30aa6b84753696da97a0c81135ed4bb5e663a039c81a6d066"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-svg-dynamic-title@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-svg-dynamic-title/-/babel-plugin-svg-dynamic-title-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-svg-dynamic-title@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-svg-dynamic-title/-/babel-plugin-svg-dynamic-title-5.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-svg-em-dimensions",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70fcc36c3039a13fec3d70c2518a155c49a6dd522801600f4fa9923d324d6d0681354b842952b2187f77a036387b8d8f607456ebb3796a5271fde128976d1a6f"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-svg-em-dimensions@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-svg-em-dimensions/-/babel-plugin-svg-em-dimensions-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-svg-em-dimensions@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-svg-em-dimensions/-/babel-plugin-svg-em-dimensions-5.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-transform-react-native-svg",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dde60ffd26a8a59e35187c1799aed19b172ff6e46c9510d36357acb6ca5e075c35b9e65677fb4f94c7c43a871c62910c654de30f8394ed88ad9d7705e612d6d9"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-transform-react-native-svg@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-transform-react-native-svg/-/babel-plugin-transform-react-native-svg-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-transform-react-native-svg@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-transform-react-native-svg/-/babel-plugin-transform-react-native-svg-5.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "@svgr",
      "name": "babel-plugin-transform-svg-component",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab88d21f5514bdbaec3ad968fed29c8127a208745205d5e8228a97d6981c28afda537243dbbc2630ac06b6907ca91614628c97bdf1b151529c84bb91e69077ad"
        }
      ],
      "purl": "pkg:npm/%40svgr/babel-plugin-transform-svg-component@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/babel-plugin-transform-svg-component/-/babel-plugin-transform-svg-component-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/babel-plugin-transform-svg-component@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/babel-plugin-transform-svg-component/-/babel-plugin-transform-svg-component-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "hast-util-to-babel-ast",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "700691fc202265107c18fdf637ed63a1ca2f52dbe58f4f9eeb94c1e74ffa2dc8a67be100e3d9bff25f8fda4a3e5cf278770df168f4b78ce2f81765f8296c6879"
        }
      ],
      "purl": "pkg:npm/%40svgr/hast-util-to-babel-ast@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/hast-util-to-babel-ast/-/hast-util-to-babel-ast-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/hast-util-to-babel-ast@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/hast-util-to-babel-ast/-/hast-util-to-babel-ast-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "svg-parser",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b8846d61470a0e7516f7edc20c4a0ccdb31cb329f6b25ba54e7e5af0bd1fbf6f3ae4cb163fdf55a46e09d0a60b6b369d5276926fa540064dafd9a223cd0ee45"
        }
      ],
      "purl": "pkg:npm/svg-parser@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/svg-parser/-/svg-parser-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/svg-parser@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/svg-parser/-/svg-parser-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cosmiconfig",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01d997eb153374d012b30b05b66c12b7b563f29a3d22ea979b4517cfb40a3ee11498f0785f28c67da02bd8f4ae10b3309113151f51292245f96d3646441dde08"
        }
      ],
      "purl": "pkg:npm/cosmiconfig@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "parse-json",
      "version": "4.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7484a80d759643052aba22acc99e0d83e1d7d8ab0f2fb2f21ca1d0c20185100dc868a69ce0e6ddfa1d9afdaeb06a2b00a1ea49941731f69696aa303cfc75630b"
        }
      ],
      "purl": "pkg:npm/%40types/parse-json@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/parse-json/-/parse-json-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/parse-json@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/parse-json/-/parse-json-4.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/parse-json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-fresh",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d1dca7eb4d94d82cf07a8d48dfc7a305f56716ac72fdb2ee5339b2b866462005d58a3ce1684a8408744b93b91f36a66b711f6b29586f61e9eb707ebd692c1a9"
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "190d84591a5057cfe8f80c3c62ab5f6593df3515996246e2744f64e6ba65fe10b7bed1c705f1a6d887e2eaa595f9ca031a4ad42990311372e8b7991cb11961fa"
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3fc06302c5ef652f95203508d7584709012fef8613ebb6148b924914d588a8bdb7e6c0668d7e3eab1f4cbaf96ce62bf234435cb71e3ac502d0dda4ee13bb2c69"
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5bfcc6265ecb40932b11171f2988d235b4614d408140def904dc6ab812e035745ea01e9ffebe066ab021896a9bf2f0ddd0fb8a3b170beab8f25c9d9ed1632e2"
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "5.2.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-json@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lines-and-columns",
      "version": "1.2.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lines-and-columns@1.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/lines-and-columns@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80329bf1a64c0de0ffb595acf4febeab427d33091d97ac4c57c4e39c63f7a89549d3a6dd32091b0652d4f0875f3ac22c173d815b5acd553dd7b8d125f333c0bf"
        }
      ],
      "purl": "pkg:npm/path-type@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yaml",
      "version": "1.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc861e175bb70a39610057a43cf024da1fcabf84f798090ca31e4eca6462250074b290cfd742c7bedf8aec6f4dcba36eb8c01bdb9ffa9f5ab252301c18d7ff00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@1.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yaml/-/yaml-1.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@1.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-1.10.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@svgr",
      "name": "plugin-svgo",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af9b302a4e3a1ae425e11ad57a3570a5e7896b2768c6477090cd6604a3a024b05424f19a2dc8baca583f22386b46c44428392be246cc59d80eb5b5c48747f22d"
        }
      ],
      "purl": "pkg:npm/%40svgr/plugin-svgo@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@svgr/plugin-svgo/-/plugin-svgo-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@svgr/plugin-svgo@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@svgr/plugin-svgo/-/plugin-svgo-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deepmerge",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dec52a6cc11cefb5eaa5d34eec547246883e796de987e19809b8feacafae63244cbb0b15cb4acc895b4f9fe40994a16f58fff53d8a5aa6a627d0c7b6927167f8"
        }
      ],
      "purl": "pkg:npm/deepmerge@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deepmerge@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "svgo",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca1cbfb106314790640bdf0263ba37d551ac834d7800a2c43f175f868adaefa977ea10fd45dcb935903f39c9fac9ac8d3e049a99876d5f6ac525d72fd3b01857"
        }
      ],
      "purl": "pkg:npm/svgo@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/svgo/-/svgo-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/svgo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/svgo/-/svgo-1.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/svgo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "svgo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This SVGO version is no longer supported. Upgrade to v2.x.x."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coa",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab9fe31be6109d2cb89d14d5e05ee53dea41259f2a04d2490c1b897687a30f22d78262fb204a3e2ded890d9b9d15316dee6ac2a8845a4a3c2ce328110930805c"
        }
      ],
      "purl": "pkg:npm/coa@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coa/-/coa-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coa@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coa/-/coa-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "q",
      "version": "1.5.8",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86ba0eb2d512705eb38488bee7ec74773aab1c0d44262f88aeb8ba6f57f1a25313aaa1c857f0a0efb12d9d0719a990aef21477997d81cc8c4de3f1b323af0a7f"
        }
      ],
      "purl": "pkg:npm/%40types/q@1.5.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/q/-/q-1.5.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/q@1.5.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/q/-/q-1.5.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/q"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "915fc24e1917a3ac72144654ba0c3ffa920ecb05dc0db15881272de5c4f782a95b901135489770cba510a19be8762585fdc9102d9c8313f06ed4cea056ee6557"
        }
      ],
      "purl": "pkg:npm/q@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.5.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ea93b2d02a9c0ba07dd5a2fcd99e4cde82a352b80ce243235951cadd0cce34d6263e4793641815c69ad3b4e7fc9a5d0ce200bb8fa20786d1bed40208e74c94d"
        }
      ],
      "purl": "pkg:npm/css-select@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25939203b328f6c34607cf948d283374bb68916024cb5cdbced3375912c26d9ef4ff771300d99098e751ef2da0f89d1ed965f2c32d724b8ebcb58f88aeea84c3"
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "3.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "002526dcbd3f8e2653a9fcd13371e2f50f1e66a77a20adfb98c58f2f3f4f27190b5a59587917fe1075121d812d168a7612acad6aad458b315587b5df0675c20d"
        }
      ],
      "purl": "pkg:npm/css-what@3.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-3.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@3.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-3.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e07765dc27f363130fbbb45bdf2b13b3098299b1d72de6573343665a418f038f3ee97c00f719ba7cc92256b6b78823fbc394c566c706baa4799dc48620b6d0e"
        }
      ],
      "purl": "pkg:npm/domutils@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbfc4f6f7391b10e369c76224ae9d79038cf2c16848ffc53c143b807b5c26504d193b101b5338f6b2821d74600021d8e23542ba7a3567e9021cecc23d3276df6"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38b113063eb0d0eb1a801c1d5e73dd37472731f17da2937af5ca3eed9adb7cf1ab7693d5341523d36b298ba07537bc0284b4223e7e02487ff326f5f0e7a8261f"
        }
      ],
      "purl": "pkg:npm/domelementtype@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7dda27f9373eb5f48d30f9a909acb647d0c5f43dbe435f7f573b0413b5749d41039a607d374b5b88429e2684e66d017af1ab85623baed84e22c1a36eb7f28f4"
        }
      ],
      "purl": "pkg:npm/entities@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "052281f934a9329148fc73b108daf53bc68c39367c853de9337190d30fe65919a48440d2149924cb3cf85d0b01578e010a1c0692b0df3328d50f4780d9a155df"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59e04e763bbc4a7ccf379bd3509631614c4b797a426953f98b97b42c5f1f83b58e445d9677bc055ffa64d2d61993bb3c4fe27b54bcb40dae89d7ec024f402d1e"
        }
      ],
      "purl": "pkg:npm/nth-check@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select-base-adapter",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d055e7911bbd10234f2f493c1fd631f1a7be09a19b2bd974a011369ef3fc42f28bd29cbd9617cec64cb3bce926f076dda52b85268381e79f030ee1817709eef"
        }
      ],
      "purl": "pkg:npm/css-select-base-adapter@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select-base-adapter/-/css-select-base-adapter-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select-base-adapter@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select-base-adapter/-/css-select-base-adapter-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-tree",
      "version": "1.0.0-alpha.37",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ccc56260d2b9f3ed4831293d10d4753f2fd05e248d0cea4b28af43a0a8e9c5f9a4420d683f376eb8d47995c94f4a548bb439555639bd88a42f40f812519de8e"
        }
      ],
      "purl": "pkg:npm/css-tree@1.0.0-alpha.37",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-tree/-/css-tree-1.0.0-alpha.37.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-tree@1.0.0-alpha.37",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-tree/-/css-tree-1.0.0-alpha.37.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mdn-data",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "895dd734ac34ea3e50ee68ba87ef6f6f1db74efec992311580a1d6e298a6c320c65a6d0e2109ed249faed42ea683a98ad44693bf8d9743bc3beb2bb31fb33670"
        }
      ],
      "purl": "pkg:npm/mdn-data@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mdn-data@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csso",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2f95c7486dfea9c0a124eef1e3f3f064734078ca55d9aee2ef3a0b3d7684b978eb0ea6ea1d395db3242852a64a7ea51a5840b40c785d389ebdd9ebc4ad6bd8c"
        }
      ],
      "purl": "pkg:npm/csso@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csso/-/csso-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csso@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csso/-/csso-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-tree",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b51a5da6917b4d16b366b8c9eafdecb73bfddeac51712b05996e9c5f4666d8d54aa71135595d476e59e0855bfd4eb7a2ade1e4a88fd50c4b1fa25445d69eb2ed"
        }
      ],
      "purl": "pkg:npm/css-tree@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-tree/-/css-tree-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-tree@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-tree/-/css-tree-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mdn-data",
      "version": "2.0.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "767eb0774bb0e46b1db303c57ec80ca79352074fda0dee9f2bde18255fc02436172fa1d52d606cc5eabb8ecec077e994d8af4b025c2993a90dd83e66c023d5a3"
        }
      ],
      "purl": "pkg:npm/mdn-data@2.0.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mdn-data@2.0.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.14.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3cc4a692ac6bd74e976b5e7a736336eb967e153acf97ea3177fae0390cb6b628d078ae53c50e37a6c3b5642c2154e49d9e7f91ce4ce5473fde638060241615a6"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/esparse, /app/demo-app/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.values",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8176a1e9a66b714c635a0db3476330a2e3f6787942073755e29ca0b9d7a168a5d2196e2fd80b114142be970c178628ba28565cba7127992528629e425e26f1b4"
        }
      ],
      "purl": "pkg:npm/object.values@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.values/-/object.values-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.values@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.values/-/object.values-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a95214c70cc29520d9e767921438e78c1f5a253fba5dc29097bf3c41dc4caba25fa4696de854885317bb5dc76a5199c5f530090cd91bbe3b617067d629bdc3"
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-function-length",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6045ce21278fec363582492f409a74b8d31ddb34c0d39271e02f951a3014ccc899d4f741205a1d51cfe302f5e16ee01b8dfd4c198ca42e63fd6fdeb33b1cc7e"
        }
      ],
      "purl": "pkg:npm/set-function-length@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-function-length@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-data-property",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac132f23396903cbfa13e489668a3ef87018aac2eb920ecc49f2229cc3c5866928af0ed7f9d39754942cf904faf731a4cccc9f0e720c3765a2775f8d6cbdd3f8"
        }
      ],
      "purl": "pkg:npm/define-data-property@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-data-property@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-property-descriptors",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7924d2ae216fafab829ed418ce4e333661cb5022f093ec61731f099f64f1a8e709eb82489dd1842d9c095e152aae9999b86b3de7d814be7ab6f2e62a49760ae"
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-property-descriptors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f109902aa10048b7799f1d14d41d6890b1256d4baeb6d27f0276264576db6c60d687ab92db4f048c3e17aaafc8f702bbbb4bfa3b4f178535a7b795ed11b47a0e"
        }
      ],
      "purl": "pkg:npm/define-properties@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "stable",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e2f6ac519ce55f72e2c3c928fdab3846484155a1bcadd6420e4a48f5a99cd82f3abb4e8b3fa14516be8b543d02e5aec89daac2bab411fcf4173d90be731c0eb"
        }
      ],
      "purl": "pkg:npm/stable@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stable/-/stable-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stable@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stable/-/stable-0.1.8.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unquote",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd10aa16fe94857a56c593f218387f17766936ff3faa8ef0ea2b9f2e9420f5a2a743bd6a3380792a223b3226bd08e723121acef4bb9e1e93188d8cec587dce22"
        }
      ],
      "purl": "pkg:npm/unquote@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unquote/-/unquote-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unquote@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unquote/-/unquote-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util.promisify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83d2690bfdc77b76e6dfccec2eea56af25c7a04712db6607b61b8f41225d332e8a36bcc84735aa72c1f30ff5949ea7b8e70855a2ee1522c3dec37ec3a1758dac"
        }
      ],
      "purl": "pkg:npm/util.promisify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util.promisify/-/util.promisify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util.promisify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util.promisify/-/util.promisify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.23.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a72d3b948d308f1002fc371f2b54ba1bb8803689e7899c13212bdd3f393d873787d08648b216eeb85c4b214f7a3b217cf586fd862a969fc33f6d8f37298e6fcc"
        }
      ],
      "purl": "pkg:npm/es-abstract@1.23.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.23.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.23.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.23.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-buffer-byte-length",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c713ef01b91ed16060cabe7ae672e4aaded0dc2aff4e1445d0b7f1e96d9858ed5ea1d339545eeb67003f361a2171f6b76278232392fb5cb0fa81c20525d488b"
        }
      ],
      "purl": "pkg:npm/array-buffer-byte-length@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-buffer-byte-length@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-array-buffer",
      "version": "3.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c37c03548a21b6c02d6a6b03faeaa953ba025e2f91f2ccca5fafc94b2be8cc422ac6ccda1dd01d7670507ff6af37f11bb6eec0707f0efcfeb76853b444473e8"
        }
      ],
      "purl": "pkg:npm/is-array-buffer@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-array-buffer@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arraybuffer.prototype.slice",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04da0263a4975cf43b805da8a483f818113e5f0ed4fa91cc60abb38e008ddc6c22688474f5451e29f85ec88af2efb42dac20650b428ad2ae7f4c447fb588773d"
        }
      ],
      "purl": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "available-typed-arrays",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2f52306d48637bfbb4a3369abff4cd93837e745190f7abad881592db4404756d23250a8d5969e5be049f83d3dd1ee2120864b05c4c359ee0c8788ef5036a3cd"
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/available-typed-arrays@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "possible-typed-array-names",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffee55153721243a158f76e1a2a8ba51eca6703d340c0c1bd672706a6ccfbc712ccc9e05a45e9234d6d46ce4bcc88e7aa87cdd57c78ad2a11f3928a87644ddc6"
        }
      ],
      "purl": "pkg:npm/possible-typed-array-names@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "data-view-buffer",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12628ee55dce2d7875aed2b6c205d16a7b1a2b5fe6b557535048842345bc464be04f4e647f1687dbd3e588b9e92cfef7c983bad78d90ef640d6bc5b1fc0e42a9"
        }
      ],
      "purl": "pkg:npm/data-view-buffer@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/data-view-buffer/-/data-view-buffer-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-view-buffer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/data-view-buffer/-/data-view-buffer-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-view",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44ab5617ca46992f3b8b60fa82a42efe5ec461195575fcde98224dfcfdd43acfffc75404ee67e1bf31c802905345fedac6f4fa0cc1b04b00576024f49df07dc7"
        }
      ],
      "purl": "pkg:npm/is-data-view@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-view/-/is-data-view-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-view@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-view/-/is-data-view-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typed-array",
      "version": "1.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7711cb227178e2b7b49ab245c7b35840f75431813c38e85bfa10528a192e434452c3f322a7a218c5de1c688eef786ff39c319a10ba4ce93e9044f6e2d52b381"
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typed-array@1.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-typed-array",
      "version": "1.1.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac4bebf7405c938599b7d1c7142e0324cb23beeef1fabe9b226cf4fc1adb59bec0d9d8c9f219d932b5a71e8f45f2cb2fd0e304adab0385fb6b7d1393caa483af"
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-typed-array@1.1.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.19.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-each",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ac75d9e442548cea0b1146a65c8528930fbcb11682636d52ba53889211e6ef7bcc48511bcc92aed6e83c7657c7b75a2f1415ae5eb8ddc4f36da6f6b64423c6"
        }
      ],
      "purl": "pkg:npm/for-each@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-each/-/for-each-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-each/-/for-each-0.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d410b40551614bfa74aadc3a7a7a7c7bef0e0f452b2b4a052f3b528cdce170a037583b89c7100f5f33ee3ed2a48c463d514a045a55fff1f80a7aed92f22f494c"
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a00307c5633c52ccd95d15bc751ec30c2cc3465605a21d828fa2787b4ade16ac2f3e2a78246361ca9f07a010ac182044aa69285f0be76fd5a9d56c3b8ec397"
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-tostringtag@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "data-view-byte-length",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6e8466c4e827d333dfb900d19ffa841bef62b2ff4facdf1294a47bd285f8b3d91c4c16014f8ec5ee44b05532dbccb35e5ac1ee394916fcdc3eb01f87b0eb095"
        }
      ],
      "purl": "pkg:npm/data-view-byte-length@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/data-view-byte-length/-/data-view-byte-length-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-view-byte-length@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/data-view-byte-length/-/data-view-byte-length-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "data-view-byte-offset",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "052f0f7e6b431a7ae061d3a89c665074b66c95621e08614ff6da5a9f4862d42a3666bd8d2800ecbc6600f17c6e1bfe145a027a0a3b6ff9826707a30cebd40695"
        }
      ],
      "purl": "pkg:npm/data-view-byte-offset@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/data-view-byte-offset/-/data-view-byte-offset-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-view-byte-offset@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/data-view-byte-offset/-/data-view-byte-offset-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-set-tostringtag",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fabd6cdfac655fc97c607be3b4c79b21e9cbf10288346bfe1175dd8adfacc2315e5e27effeb4e0278113bc70e0cc3566d545d5659866502f6612df247c6c850"
        }
      ],
      "purl": "pkg:npm/es-set-tostringtag@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-set-tostringtag@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3ee662771ae14bf8d8d5b4996fc9d4a1a84d5e3778773db23bff92c0b1824fff6aadb8c5e37cbd8ba47491aa8e1be1e485e4afc31f5257294007481d945b9d2"
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f0c2111a90754a4dd44d54ec3efc6ca1d3e33394297847aa8abe486ebcbb4f320808d56007b7db0ec19c502d21a951a0e7addc83b289a846036709f28d4975e"
        }
      ],
      "purl": "pkg:npm/is-date-object@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f601b1e864ed09033bdc18261d05df0e62ed7e38d35034b2a314c26e9e56b688b10217e0b038ab58871543f207a6f2395607798bf27917b07d70dfd69556c2ff"
        }
      ],
      "purl": "pkg:npm/is-symbol@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-regex-test",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7ff82cf862b8a643141c7097f998a11b21ad4dcde091348e44725fde92695869a9a974d2cf6a557221c09934d1f732f9aa06e815e53318657bf4963b255256b"
        }
      ],
      "purl": "pkg:npm/safe-regex-test@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex-test@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32362c2873b93bb982b26446c5670b5a1785a8df4327fd939a782f8ca5e285ee9e7d588fa9cdbbe3e171ff87d88ffaf4dfe112bc17535cad15ead037ae07b3d6"
        }
      ],
      "purl": "pkg:npm/is-regex@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function.prototype.name",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b98b0ca874e1e16ccaffc8dadcedf0d81b8aa56c8bc8e606a3cb33e76f94c2c32863029ce7421d41305a2ef5bdf449ebd8e3780224a5f27280818cc6ecb96d1"
        }
      ],
      "purl": "pkg:npm/function.prototype.name@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function.prototype.name@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "functions-have-names",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c901517c9322a4fdeedab6c7600c6fe835eb76f9245cac624d31e2ac4d1706df42498d6688911dbeac3f323dfd0577dd67aebd5601508883e0dccd232a9a45"
        }
      ],
      "purl": "pkg:npm/functions-have-names@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/functions-have-names/-/functions-have-names-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functions-have-names@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/functions-have-names/-/functions-have-names-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-symbol-description",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3d50ca96c09c4734ebe8373489da83c5e70bd872f3fb8d4bd8ce1a7aef21214e2d7b6430410b5cfda53746bb38c3f84148a8b4984707998ea7e23f3434e846e"
        }
      ],
      "purl": "pkg:npm/get-symbol-description@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-symbol-description@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globalthis",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e92ca6cd5385b2969c49ca442e8df09cc185a257f2619b9d06a28d30ad520b02fe633abf5df87f944773e14820f6ac2084220d2e73e1be9ae053c03e782610d"
        }
      ],
      "purl": "pkg:npm/globalthis@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globalthis/-/globalthis-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globalthis@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globalthis/-/globalthis-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-proto",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2882fb7903df1d0442f3e5e5b9a230ec11d4c30a8bd7d6d09f887336076bfb5c17a14d0a2a3eabb9fbb8ee5858eca6c94760ba4faf8f7f237411aef09124bea9"
        }
      ],
      "purl": "pkg:npm/has-proto@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-proto/-/has-proto-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-proto@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-proto/-/has-proto-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internal-slot",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2077b56958d40d07850a28214555ca75015bfe14c3a0b3d34ace31cabac73c8d332177978bd4da90a8ea44d0accc76cf34e3fc87960969deec6096e3aa00f2f"
        }
      ],
      "purl": "pkg:npm/internal-slot@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internal-slot@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-shared-array-buffer",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21259a73c76bbf86467f02a5e6c9691c6f4ec0f36dcb88ce58f448841a713a80fe86a2138b0ba2a4e4366cdb61033c00dc1e1f2233b83659fbe0dd12f5bcaaf0"
        }
      ],
      "purl": "pkg:npm/is-shared-array-buffer@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-string",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06d11e4aca1a4239523c17a631022b635318d2e33abe74b58397e6b9f60eb67c4b19464cdb5efc3ca6e1b24ec57efe7c217f99b5cbe81b071c62c8743e096400"
        }
      ],
      "purl": "pkg:npm/is-string@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-string/-/is-string-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-string@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-string/-/is-string-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-weakref",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea2f661964a5ab334c12aa42a7ddcac114b5b943a8764d8e27a6feb2aed93c34b2d96b88e4d148c69ff6e784f2b51f1fb5e7dec645a7e713621d43693ce7d27b"
        }
      ],
      "purl": "pkg:npm/is-weakref@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakref@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.assign",
      "version": "4.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cadbc58ea3e4088c190376e4c8344e09905fd42492b27f6109c6f24a7db943a7283443ea643873532f4430cba34fe85844fc49f357bdc1c71a9c25a5d8f5a9f"
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "own-keys",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a853b22b93e389665df9040887ed6385d6fd2e9c53174aacecf9bca39407619d0cdef2aa4aacec65a101ea85a5c59faadac241308fcab607763796704284477e"
        }
      ],
      "purl": "pkg:npm/own-keys@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/own-keys/-/own-keys-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/own-keys@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/own-keys/-/own-keys-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-push-apply",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88a13dc3f67bc42cd430866a741b29ea9110bf0b8479b1f8bdda637035a7cb3688eb297a3bd147bd5a6619e96f10736ca18eb019b964c51e99b72fe1d345a248"
        }
      ],
      "purl": "pkg:npm/safe-push-apply@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-push-apply/-/safe-push-apply-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-push-apply@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-push-apply/-/safe-push-apply-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c478e10ebddc3412b40737542523d7667b50531fe6c0c4b9470e00ee53c9f745c600ee8848ffde3c336ea34be1a8e654f940f9268a1dc02000a1941ddc57802b"
        }
      ],
      "purl": "pkg:npm/isarray@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexp.prototype.flags",
      "version": "1.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "758aa035265b0f091a27671e45df688c21a306afa63a6f4b9ad5e7027106c8784dff947b8835b64d1c3787ea3f8c2171bacdcfd8b7d62088b0a3002300d9bb20"
        }
      ],
      "purl": "pkg:npm/regexp.prototype.flags@1.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-function-name",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf185966b70b040036f4598caf08c6b5b7eca47ba75a206e168ab69fbabe6471ff8c8549cf9acd54791d02290753643f35c844b03076ed9fe4d1f9d32f89a91"
        }
      ],
      "purl": "pkg:npm/set-function-name@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-function-name/-/set-function-name-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-function-name@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-function-name/-/set-function-name-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-array-concat",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "014466e5fd236043b27418fb550955bc3ae378582d8437441791f574ffba98da685ce328d6ab90a89e30bc90f2459f7ea4ede4196a0e766574f1c4afd9a255e9"
        }
      ],
      "purl": "pkg:npm/safe-array-concat@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-array-concat/-/safe-array-concat-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-array-concat@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-array-concat/-/safe-array-concat-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-proto",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44945dbc2a3a2009cf76cbcfffb9ba6ec42a3679f5142057e5936d14bf7c326145ff8c402094c883561b1d6e430b65b948a65a9eb0ba8b81ec26a95a8f0fdd67"
        }
      ],
      "purl": "pkg:npm/set-proto@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-proto/-/set-proto-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-proto@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-proto/-/set-proto-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trim",
      "version": "1.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46ceba1743ffd6479d9399726321fdb81cee888fe43519b024047daae2ba54eb48a59d86fa131977e1d06dbbf6e4c80203a8047dfa0c658c654e877859c76b28"
        }
      ],
      "purl": "pkg:npm/string.prototype.trim@1.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trim@1.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trimend",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bb3a4e42e84fe3e1219fc8b0a5a174eb9e0408414dcf5ad5c6b2ddf233b05e6bd1515117f54b8d991e5659b6c36ab9ed853763e85217d95d82cd5b012be1d2d"
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimend@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trimstart",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "517487dbad82499635b5fbb71b749e72beae18b08554f32122a1e3960094b4209c82285873fc4ab3d76331331439bda3d66552794f0453a35673f890294e867e"
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typed-array-buffer",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c0618c1f637aa7cd7df422403a01066355bb4ae9db86a27b5c426d56486d4c0fde182ea2b4e75e46340a57928c4a39632eb15b2c00758b87d49e6a879f6051b"
        }
      ],
      "purl": "pkg:npm/typed-array-buffer@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-buffer@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typed-array-byte-length",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05a5e03ae231cfc9fca48ab77bb02d83feecf83a6262bc67e2f768b77c3d29b9c185c450abaa37c5e9907487f29ea49e5de0eb177db1f96bdfce63a33e263d96"
        }
      ],
      "purl": "pkg:npm/typed-array-byte-length@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typed-array-byte-length/-/typed-array-byte-length-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-byte-length@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typed-array-byte-length/-/typed-array-byte-length-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typed-array-byte-offset",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d3940141fc505831cb97f3581b2f839ca47e4f9a5147aa5082a4097c025133333e64e77a0d0ef37ca753cd3962c4988db1e28ae9deb68e141e75b6ff57f8c15"
        }
      ],
      "purl": "pkg:npm/typed-array-byte-offset@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typed-array-byte-offset/-/typed-array-byte-offset-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-byte-offset@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typed-array-byte-offset/-/typed-array-byte-offset-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reflect.getprototypeof",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d34a3823e0d5ade7e1bfe9d7d2e9728b76e248708f0defb22efe68fe9e9dfd45658ab8a307c135e85b5fc12022e20ded72aad0e25440a904a81446497a160473"
        }
      ],
      "purl": "pkg:npm/reflect.getprototypeof@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reflect.getprototypeof@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-builtin-type",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea205cce85fe90343b6b7f982419e1dd3f8a651c4cfe260d3d789caa4ebafd07e6d5bf778aefb23889a4834cc76e3e4b34e70dbf54c4003899d316b7e01e2ae9"
        }
      ],
      "purl": "pkg:npm/which-builtin-type@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-builtin-type/-/which-builtin-type-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-builtin-type@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-builtin-type/-/which-builtin-type-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-async-function",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5d80cfdc6419cdbe3cda3181d5a31c5f3e3d905eddb612fed2bae3ebb3ec5abf4ba4181d12e9de3275974488ce3c90bc7990357e4013eba559c5c9e7cbf2491"
        }
      ],
      "purl": "pkg:npm/is-async-function@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-async-function@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-function",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c535f007bc0834d1e8a82ef4361fd046c2aff6b98862f4af2b500e86d471da5838aa2493c2c48d5a619d7903920a62d30615b2aad7b8fd1b67125a4ea760a0"
        }
      ],
      "purl": "pkg:npm/async-function@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-function@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finalizationregistry",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d690ba37ca9625b5a83ed12381c2f6c7285038fe3dd44423794a37a9329c995f184830c9ace7a97c6f29702ee1fd0827407612bf4989dd9fd95b199ab55af2b2"
        }
      ],
      "purl": "pkg:npm/is-finalizationregistry@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-finalizationregistry/-/is-finalizationregistry-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finalizationregistry@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-finalizationregistry/-/is-finalizationregistry-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-generator-function",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cf501e649b8d2af5ef147cdfd9736e1e2e5cdd49ff4e7ca072070f4221dc381f58223cc780d0e209bdb721b02bb89e97c8d9070c541b061011ca67bc0b4d699"
        }
      ],
      "purl": "pkg:npm/is-generator-function@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-generator-function@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-boxed-primitive",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4db5f79a3f27d2874204556563c03192a707012c372fad2322e17c8c53fbf1acf70b6621986bea6c70690234d11f6ff1a98ba7ac9f60d634b28c28e9a16cc800"
        }
      ],
      "purl": "pkg:npm/which-boxed-primitive@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-bigint",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f8653dfbc06efc8b3d37c4f44a26b1d37596dedc889ccae704b5d46c579ca09707371b251f6c07e949e0f4149e3535b50d4ade706e1a9fa757d2f81827bc315"
        }
      ],
      "purl": "pkg:npm/is-bigint@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-bigint@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-bigints",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "477a5ba64708aafd8f9b7754c208dc943455996a53256d8370ccdc221117131d6887f08430e6cc9b728b99124e76f84cee8e2e4019f0afca7344adac25622a7e"
        }
      ],
      "purl": "pkg:npm/has-bigints@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-bigints@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-boolean-object",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1ae7aa36fc4949318aa30a31a45eb8bb8ade456de6d6e6eb0bc3f9cf98232ce43799edece24986614a63d19f4b71a9e5b82e702641053b160a8ba6c10528ce0"
        }
      ],
      "purl": "pkg:npm/is-boolean-object@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-boolean-object@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number-object",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95985c96e984d46e95603f151dedf9c0568889ff824f2e522488b9fb7cb8a6c0e05aee303c3a01845f0dc543a29c473ba478224ec4fa31a05bf76aca8610fe5f"
        }
      ],
      "purl": "pkg:npm/is-number-object@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number-object@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-collection",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b88d5ca39c1760bdcf3a63a06468b64437ddf74b060eb8116476606ef597e47006dd55ba484e70e68ef67f6908d15d0aefe443e44e70f5b37f468a2a9b9e00b"
        }
      ],
      "purl": "pkg:npm/which-collection@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-collection/-/which-collection-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-collection@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-collection/-/which-collection-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-map",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5079dd3f1ebda6f98ab19ccd3d0a303677f8ba61935f17a476a1100e8f7e9e51d4baa8857f86e3c935212929bba97b016cf99b09971b238cf6dcd3f69f5ba2f"
        }
      ],
      "purl": "pkg:npm/is-map@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-map@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-set",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f0237abaec7b6effca018bc70f84051f5a82ff58eae2de61524cbbe40d0a8a2e275ff5ae2d261ab716a5f0aa159bb3cf1dd68edc311b4f7c5fe9f83ae4643e"
        }
      ],
      "purl": "pkg:npm/is-set@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-set@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-weakmap",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b9a5760e9bdc2a6354608e92f7613905dfdb678b55da8d42246b04cb528f446445541606b981240917c9cd4bb670250d36cbed5808d61c321f8721fd59a84fb"
        }
      ],
      "purl": "pkg:npm/is-weakmap@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakmap@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-weakset",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99f7306fa23343238a4ecf3809032b3b05b881071a4ce016274cf32429765923c3ad693f3b30da2265851f77635e16f6e20e1eb9d65f2d1a3302f3c6c3877d85"
        }
      ],
      "purl": "pkg:npm/is-weakset@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-weakset/-/is-weakset-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakset@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-weakset/-/is-weakset-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typed-array-length",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dca4b66fe90bedfb2e93f78967b1107671264286a1a3fafa29479fee1c6f96d340e4347c34050cfbcc0931b2726781bdffb8b7bf9ccf04830de5ac9b021dbf26"
        }
      ],
      "purl": "pkg:npm/typed-array-length@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typed-array-length/-/typed-array-length-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-length@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typed-array-length/-/typed-array-length-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unbox-primitive",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d627dd438de3a47a3fd303ca574379b2aee2a9284620aafa70f65cf838f1e3fcd585365b98ae36f3f63d35089f322907768388c5a0e9083424d6d88e4b104cb"
        }
      ],
      "purl": "pkg:npm/unbox-primitive@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbox-primitive@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.getownpropertydescriptors",
      "version": "2.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa41c819ee2ad2549832fd172384ac053273dd66944612ef77494a4a0b55b8eb09da4ae0e1280cc373c845014ca74ef28bef94477b1eda691c2eab0136905bfc"
        }
      ],
      "purl": "pkg:npm/object.getownpropertydescriptors@2.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.getownpropertydescriptors@2.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.reduce",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b39a2502570b620f8960c583fc83b218cbc125f29d8248c78fbc86d34bb81c84a8abfcbd5f809ae4d320ca9805fa9a745014a3400d8224f273654eb8ace47d5"
        }
      ],
      "purl": "pkg:npm/array.prototype.reduce@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.reduce/-/array.prototype.reduce-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.reduce@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.reduce/-/array.prototype.reduce-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-array-method-boxes-properly",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1de895d49b21e6b7c4f96b6c6b794c0a7063eae9fd5ff96c082648a352a886709cf5aaa9d980fe9720af90c88594e654fb8a678dc54965e3c6f3886f9349870"
        }
      ],
      "purl": "pkg:npm/es-array-method-boxes-properly@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-array-method-boxes-properly/-/es-array-method-boxes-properly-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-array-method-boxes-properly@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-array-method-boxes-properly/-/es-array-method-boxes-properly-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-jest",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71d4397578c645dd08051013890e2664694695113c909a633ce8b174d45d4fe9b751c36a99858deab2ba9efb5761f6370fbe9c6fcb3f3b54acf1e6b6e0f23072"
        }
      ],
      "purl": "pkg:npm/babel-jest@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-jest/-/babel-jest-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-jest@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-jest/-/babel-jest-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jest",
      "name": "transform",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a938de96b58825ff5df6f60e4020955b52e121d306556dda46c02f7d270e0bc2ea01352f79315a6153acce783f690e4a27f8b2db14bee539045aa5b07c4821f"
        }
      ],
      "purl": "pkg:npm/%40jest/transform@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/transform/-/transform-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/transform@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/transform/-/transform-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "types",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b1e3a889f50a704138c876ae5526ed904cc32cdd09448c8d31d506c13f95b5fa7333c9cd979a29a2451fc26d7f533b470f4de525c5630ebbc9ac958b09f0313"
        }
      ],
      "purl": "pkg:npm/%40jest/types@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/types/-/types-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/types@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/types/-/types-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "istanbul-lib-coverage",
      "version": "2.0.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9017fb7f6ae5a6d25b32f17b4a54f1b5f6fdec48e42525efd81d981f8dbfca0411ce19257e276abf4baef5adcabdb9306b2c05e6669a8989a41b313fb3354d7"
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/istanbul-lib-coverage"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "istanbul-reports",
      "version": "3.0.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a64d81d4d59a945f6da0246eea08c1cd1ebdb321633f839df164405fed2699ff6502309189c2ce59cf99af1647c7fd17463a2d82417db7a89a309f9a5dc39d65"
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-reports@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-reports@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/istanbul-reports"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "istanbul-lib-report",
      "version": "3.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3509fb00742793f4522cec6b05b1b224cfda550fa98e3e470a06ac1717342bf2a1a004df43fe3b032525d79236c815298a18e66acf9af952413aa79cac51feb8"
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-report@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-lib-report@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/istanbul-lib-report"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "yargs",
      "version": "16.0.9",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b47873be41576507931027a71684658cb0583d927b8c0571aaab44234a932ce9aeba5b67169e08f72284d7bbd3ba17fb064842bbb2385ee7a63e08a40d5b98a8"
        }
      ],
      "purl": "pkg:npm/%40types/yargs@16.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yargs/-/yargs-16.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yargs@16.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yargs/-/yargs-16.0.9.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yargs-parser",
      "version": "21.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "238abd414f4c42fe2810ecf8b401c9b4dcf5730b8bc67d85df171cda257959da8b3e95278f7d1a52ec6dd660316131bea1ef0264c57ffbaad4e12e20443ceab5"
        }
      ],
      "purl": "pkg:npm/%40types/yargs-parser@21.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yargs-parser@21.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/yargs-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-istanbul",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "635210a24f7cdb5702f689c2c79a2d8057d19bb2e6f88fb0c313b1ef7f0cfd62cf67d438da6e081b95b414d5fc58b2f6818319a37264b97207d833a958cfaac0"
        }
      ],
      "purl": "pkg:npm/babel-plugin-istanbul@6.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-6.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-istanbul@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-6.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@istanbuljs",
      "name": "load-nyc-config",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5637874a5233a6ffcdc83dcdd18b877d738f0c88b1700d6ad9957df30b0ca9c6253e6bf69f761bda560ff5730496768555783903b60b4de2eee95f38b900e399"
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-package-type",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cee2ad63ae0661f5a2ccd009d1fafd56ab6d6643622b6892e37d0bb481f38c112be9b5fc026db39b8b16e11a39c23596e5c02544bd6a00c4dc5db8cd00ed9"
        }
      ],
      "purl": "pkg:npm/get-package-type@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-package-type@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9883d28fdb8743e6a91af49e3b774695932d0df9be1f4d4f3d2cdf620e78c1e706a4b220b8f6bbcc0743eb509406a13987e745cf8aa3af0230df6a28c6c5867"
        }
      ],
      "purl": "pkg:npm/resolve-from@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@istanbuljs",
      "name": "schema",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "657458e2336f56049543c0cbdcb4dc6a4680b57c13554c44f3586c96cc83d80b685d6ff05686f5d0790e2755ffa4095c23b0fed98a192a0e5da3c1bfc3a45880"
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/schema@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a73aada77d672effd714ecd71aebe109bf2a863993568e6f8d5935f571380919525b3d0aa1e2776f0f57b00ee73a9f5805fe2a1e3c01c640f329c304fc9dbd62"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bc769b05fabd1657ff0c35129f9e6aed09686e2a3c6bab6c3e8e9cc12f95192938b62de5569d63a6591c4595eb0938d99cfb02c01af29064439a9e4a342c54e"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7001963c8c8e1d4eb396683cf23c26ed54725e730dee257af0e1806d80e4fcc87fc42fe9cd53e542d63a9e0a081ffe7fb5c8ae8467ef11253c1ab1eb7310f9eb"
        }
      ],
      "purl": "pkg:npm/test-exclude@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Glob versions prior to v9 are no longer supported"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-haste-map",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec6824678170e0d15b3120d2a59c177818886f1fadff8ea7276422b643a3bf03d8c999aab6dbb64c34a298c1cfd4490f3a2e3151900dd5da04e55776e47e099e"
        }
      ],
      "purl": "pkg:npm/jest-haste-map@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-haste-map@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "graceful-fs",
      "version": "4.1.9",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a253f7b1dd6a3847b97574d2685bd01bed3655d45771dcad58b019b00ab53de714f2ea9002192b9db962ec36a08ed5ca5bf065ed825b52c6bc30f72e73c2c711"
        }
      ],
      "purl": "pkg:npm/%40types/graceful-fs@4.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/graceful-fs/-/graceful-fs-4.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/graceful-fs@4.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/graceful-fs/-/graceful-fs-4.1.9.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/graceful-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fb-watchman",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a79d7ad41a9bb826929c1f2321bcd01ce96982c3e62b9ac95437c328ef75031b39342d6ebb71d1426eb0b7d71df7ff86b504083b9dc97465d7a320e94c0b2060"
        }
      ],
      "purl": "pkg:npm/fb-watchman@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fb-watchman@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bser",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "810c53344fc601f208ae61cb504de8272a7914ee874417e18e7c38ff032603add91832675819a063f972401a670d490698085b49edfdb71d9dfe24ce01f825c1"
        }
      ],
      "purl": "pkg:npm/bser@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bser@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-int64",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b9973f75c5239ea173fa0ee9721df965a6af84834d0c5a2b5921bb4f7e8484bea207765e607dc63a858cc35a78f4a83e6dcf9d8f234f2ef6a52f49579405e1f"
        }
      ],
      "purl": "pkg:npm/node-int64@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-int64@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-regex-util",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1b7caab6ce27bec75ea892a0d78d79fdaa5d81d1d49c42efaf7307b84ef155864572b962eaa59ad9b57c4b2d6a176209f413cec8eabe864581c5ef0159054be"
        }
      ],
      "purl": "pkg:npm/jest-regex-util@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-regex-util@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-serializer",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d90b2a3a888c4ed5aa94c69b819704c3324cce0094b86b7798cf7633831c55405c0b79203b25fab971ba8263e24bbd30eb5a2ae0bac23fd0ac3128c82b75fef"
        }
      ],
      "purl": "pkg:npm/jest-serializer@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-serializer/-/jest-serializer-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-serializer@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-serializer/-/jest-serializer-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-util",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afda8ffc8cdbd7d4c434286b70e3cd04ff0e1f0420ce9c7ebee8399e2a2e8b654225280e64c18d1835d9736964e2560c6a02a8a4d75432c4338a939e3768a5f"
        }
      ],
      "purl": "pkg:npm/jest-util@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-util/-/jest-util-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-util@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-util/-/jest-util-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "ci-info",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "348c45e7986fe274aa42cc2401e88e8b5afcdf1cbc26574e1434d68ae839e4a06ef499db96771dd94e958879988077f4d533d94bbecd24184130a7568fd1d031"
        }
      ],
      "purl": "pkg:npm/ci-info@3.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ci-info/-/ci-info-3.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ci-info/-/ci-info-3.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walker",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6cffc13c9796fb918d2f9562dec0e9035cc98f74b7155781a63902f2c6e4acc0826cc1e78566d02c305ee4d4db33cfe4d8050ae56119b33a7af7f7ccb525e99"
        }
      ],
      "purl": "pkg:npm/walker@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walker/-/walker-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walker@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walker/-/walker-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "makeerror",
      "version": "1.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "266a82bd4866b78de669d9691731b8050cc6d99de6eadbd00cd29d0a56673b755b22e749626c6c4f414d24c7a2076f894d295341349b53c41d7ac566c097262e"
        }
      ],
      "purl": "pkg:npm/makeerror@1.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/makeerror@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmpl",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddfd2e384010c08a86b965b6315cd883c7d5fd036773f229b89346f37eeb2ee73301a2d51ec9561d9423e081a2125e47b379246e1c0bf406fb1ebb26ba3f929b"
        }
      ],
      "purl": "pkg:npm/tmpl@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmpl@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pirates",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1a2ec1fb59e6183e20f6e4b0ee2d1458fe2fba1da3d8afa1b539494ddfda2dce4493c4a9ee6d1f514f14b7fca939d2cd60d894e01705900d0ca9942e7f48766"
        }
      ],
      "purl": "pkg:npm/pirates@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pirates/-/pirates-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pirates@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pirates/-/pirates-4.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83d43585a79bcb7e8e492b706f89ed08618668ab1a5528d0ebc7c1c6841cbad9797d2d6fb98d7c1f7c12b778c5c85b6b931f8acf45751bce40e0cc80743322d9"
        }
      ],
      "purl": "pkg:npm/slash@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f1dcc99e499d27eade2a12ca3ac1907f725b89bb03293cffd332fc30fda2729ebbff787f0acca1c7a63b64002450259e70cdf990d2f998c0479b9ad7f3d5fd"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray-to-buffer",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cddbbc5cc3440dea4a291f9760e5c054fb56ba2d25cb436da2152c730f9499a1e20164fc86b575aebfff1fa57ed03bc9dce435f52f7bf4cd2568b7d7f2b9bcd9"
        }
      ],
      "purl": "pkg:npm/typedarray-to-buffer@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray-to-buffer@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "babel__core",
      "version": "7.20.5",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa8429ad9bf3e70405270303a9eb1e4575afdeba8cbe18296d715f5725a16f1f57e3b3ce200ea2ffe75779f12664aa0080e69375a22035232a30853ad72472cc"
        }
      ],
      "purl": "pkg:npm/%40types/babel__core@7.20.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/babel__core@7.20.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/babel__core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "babel__generator",
      "version": "7.6.8",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "012b23fada440ec12216bd5aad6ae537a57799d7e344c66de8bb4afd5a7f92b7852e7af9407e7e0e1bc3e6720d6195f3c09bd7786abed398945dc03356ba96b7"
        }
      ],
      "purl": "pkg:npm/%40types/babel__generator@7.6.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.6.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/babel__generator@7.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.6.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/babel__generator"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "babel__template",
      "version": "7.4.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87f354692c86e44cb1048a7c611c68e1131edbfa9082fca8c11c1533385884108e35b5bc3d4b20e2590532b86066151ee73dcbdcc88b0eebf227f09a3dad80f0"
        }
      ],
      "purl": "pkg:npm/%40types/babel__template@7.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/babel__template@7.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/babel__template"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "babel__traverse",
      "version": "7.20.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af56f37eb9b4b6898e23c8354b3bc26901e8e8b72feb3bb4100f96da41ebb7c772ac74311b30412f891d933212fa304c57e11870c00402a5ea61a2c9ab9ace66"
        }
      ],
      "purl": "pkg:npm/%40types/babel__traverse@7.20.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.20.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/babel__traverse@7.20.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.20.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/babel__traverse"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-jest",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "369b5fd85ce53c2598b89838d4706a5d54fcca6e9b5ce7afb824db871954a63c2dcac19a21616f0c48e9e32f86edf975dc580e763b3b3ff0e612ba87edd6b402"
        }
      ],
      "purl": "pkg:npm/babel-preset-jest@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-jest@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-jest-hoist",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e74c02c03e4430d5b8691a4ec2dab3c991c87b04d83712c0e27841fb4f5df0122cb1f35fcc146190120789a3efd528b6dba4d04afa7c8310099b6898daab3685"
        }
      ],
      "purl": "pkg:npm/babel-plugin-jest-hoist@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-jest-hoist@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-preset-current-node-syntax",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95d62cb3c49b0655af6b56ecdbcabbf09bb966ad45fbc06ba81659d151612c1be187a942a42da8de00c98bfe4344bb3d1606190a798f6085455389515c293253"
        }
      ],
      "purl": "pkg:npm/babel-preset-current-node-syntax@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-current-node-syntax/-/babel-preset-current-node-syntax-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-current-node-syntax@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-current-node-syntax/-/babel-preset-current-node-syntax-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-async-generators",
      "version": "7.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b727266719067d96b184c45b5e53d7b95169756957a62af65b800c85226044ace4fde0e52173a16f62c75a82e90c5ed3107ca5579ccd872917e8a0201c999337"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-async-generators/-/plugin-syntax-async-generators-7.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-async-generators/-/plugin-syntax-async-generators-7.8.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-bigint",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c274e71651be631426def0f1a46139ecf8f4b2b454e2c1c4fe60e4b75aafd9824949e50079cda66b858b52750f78a8f2adf9ed5707bf37a7425e953eccbdcda6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-bigint@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-bigint/-/plugin-syntax-bigint-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-bigint@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-bigint/-/plugin-syntax-bigint-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-class-properties",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e6e227632a56b461a85436014d2c2074ab249db283e264fde2404deb932d26054b4c676df20c9f5225d83a7574d20e7ba5395aa21771e0afd9db5ef5d341960"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-class-properties@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-class-properties/-/plugin-syntax-class-properties-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-class-properties@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-class-properties/-/plugin-syntax-class-properties-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-class-static-block",
      "version": "7.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fe6323e6afa95dc8d9cceaca9878c584f9b809709a4eeb24b8403ef29b1807df81813cd0ccfd31c187c8ae9f2bca219ced8b02c7e02259d11c5393d7a68298f"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-class-static-block@7.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-class-static-block/-/plugin-syntax-class-static-block-7.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-class-static-block@7.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-class-static-block/-/plugin-syntax-class-static-block-7.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-import-meta",
      "version": "7.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62a7e6f970f1d3e3eb8775527844023d4f35c82f89599da90cf1524b865da5f661a7832414c6830b552ab1ea2f10ac125299c82fbfaf2be0a5a7b6df874883ee"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-import-meta@7.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-import-meta/-/plugin-syntax-import-meta-7.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-import-meta@7.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-import-meta/-/plugin-syntax-import-meta-7.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-json-strings",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "958ea4746a561ef8e87b6be4e16ac06a912e051ebd10cc5997e46819186b14635854af2638f016f157db4ff660ac56d794336289ac509c0b6054267a8efdf410"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-json-strings/-/plugin-syntax-json-strings-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-json-strings/-/plugin-syntax-json-strings-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-logical-assignment-operators",
      "version": "7.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77cc1a4a19691438a743932dbc653dc4300ecca1f8efe145a277b2d9b68522832bf79da128e2e9d4747b56cce866f3ac57fe3e451b33358ec3d7b6dad2d7b48a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-logical-assignment-operators@7.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-logical-assignment-operators/-/plugin-syntax-logical-assignment-operators-7.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-logical-assignment-operators/-/plugin-syntax-logical-assignment-operators-7.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-nullish-coalescing-operator",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6927dfe333c8235bb6403ef2f85f280eccf5f5ec3820610983d4955be6eac29c2d7c595e8900cc77303f47e525583cdf9c7142c7195e153d0f308ad1dfa5cb35"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-nullish-coalescing-operator/-/plugin-syntax-nullish-coalescing-operator-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-nullish-coalescing-operator/-/plugin-syntax-nullish-coalescing-operator-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-numeric-separator",
      "version": "7.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f47e9875f91c2bfb8e9d8fcaeff680db1a73680824427dfbcb35943112bb39a3cea8ea464b5fa7d07e61c53f40530f44b128cf5bc495c8c270611b56b375f7ba"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-numeric-separator/-/plugin-syntax-numeric-separator-7.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-numeric-separator/-/plugin-syntax-numeric-separator-7.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-object-rest-spread",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e8a8c8a31996fdcb7cb65ec90df8fd70506895c16679266a03470c79fb71a612994dc95336b360e0f082c5426f2b58ce3ca2b1b2e58a48e4197c535cbbc9d94"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-optional-catch-binding",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e953c3d0f7359694eac3468aa1e45332207e916840a13db83c0fa4b16481ac5b65e52211569665c0ddcd34f4237a103613ff75155dd18cb5a855382559c495dd"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-optional-catch-binding/-/plugin-syntax-optional-catch-binding-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-optional-catch-binding/-/plugin-syntax-optional-catch-binding-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-optional-chaining",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a82bd12b1f53019423f15745403645d6dbf770e2f95b183ac5833f1b994b0119890545c6d1c0c87a70826e6dd3eb931470b8676d0a4d2fff03d329b42006392"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-optional-chaining/-/plugin-syntax-optional-chaining-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-optional-chaining/-/plugin-syntax-optional-chaining-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-private-property-in-object",
      "version": "7.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d30567a7d77127bd995090d5dbb65f6d28fa8872e8cad6199a1deb15cc4d9efb0917792d9332c364fcbf980d7b1c6b1a413dff0d0b16617d5fd50196902a1552"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-private-property-in-object@7.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-private-property-in-object/-/plugin-syntax-private-property-in-object-7.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-private-property-in-object@7.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-private-property-in-object/-/plugin-syntax-private-property-in-object-7.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-top-level-await",
      "version": "7.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "871fbeba92efe54d6b8187f07b5c41414851994e35344be952fae9f2392b48276f1929cce7fa9d44cb72949e8f1b938590168791b4c02939dddff63211244717"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-top-level-await/-/plugin-syntax-top-level-await-7.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-top-level-await@7.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-top-level-await/-/plugin-syntax-top-level-await-7.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-loader",
      "version": "8.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d7cd10a15fe6751a813ac966af05083a8c3b25c851774838e5da96800eea10b505b5d09a92849b7ad91e9e250e66fe98c91434fcc602885923fce4e63c79778"
        }
      ],
      "purl": "pkg:npm/babel-loader@8.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-loader/-/babel-loader-8.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-loader@8.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-loader/-/babel-loader-8.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48788db4c394196050270cc84a25582aef361a257841819e3e9de8765635b6e28eee03eda61013e51fe9cb47c0eb1b5b80b2ff46fb4966753d6fcb34175ab45e"
        }
      ],
      "purl": "pkg:npm/schema-utils@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-2.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-named-asset-import",
      "version": "0.3.8",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-named-asset-import@0.3.8",
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-named-asset-import@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-react-app",
      "version": "10.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fd075c4c76790222a7bed9d1eb26ca10151cfbade0a16801c4ffae5275aca43e4950aa199ed96682d3ca03de2b3bef1f5f7fdf3ff446b300a14366fe6b14442"
        }
      ],
      "purl": "pkg:npm/babel-preset-react-app@10.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-react-app/-/babel-preset-react-app-10.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-react-app@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-react-app/-/babel-preset-react-app-10.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-class-properties",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72e99f5ce174fa7cd9aeb37c45fd2deccfad17ab1973bbe1430610724f6ad7fe70d8e131943f9be2fe11a4c245695d59ed67034603ba16abf1ab11a5c28f911d"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-class-properties@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-class-properties/-/plugin-proposal-class-properties-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-class-properties@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-class-properties/-/plugin-proposal-class-properties-7.18.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-decorators",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2690d2cbfced5ecf2f4d872e02368b1ce156bed70a39c3883349978b7bacba74ce269877d83823e895740f1d0c689d9085f99c9e6f137dbea3a896462b4a7e6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-decorators@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-decorators/-/plugin-proposal-decorators-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-decorators@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-decorators/-/plugin-proposal-decorators-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-decorators",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af2cc8d0c71750f267442bcca3896e98829953385850efd2708f8ccf86156932edd380c73528c4523295bdbcd08d914bba877f71811cd3b9895a1ce5eafe033e"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-decorators@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-decorators/-/plugin-syntax-decorators-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-decorators@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-decorators/-/plugin-syntax-decorators-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-nullish-coalescing-operator",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c10c50cf161e26a1dc7e9a730439e6d72018d234919145d1db3f1178f658acac0c2a032513cf99e8b527a3e6dde8bbdb1a1f0696dbf2ef8fbda48624afe5e428"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-nullish-coalescing-operator/-/plugin-proposal-nullish-coalescing-operator-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-nullish-coalescing-operator/-/plugin-proposal-nullish-coalescing-operator-7.18.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-numeric-separator",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3395916880faa82e6f1606be59f14724228138610e4a11255c36e7725ce47cbaa2249624c4809dd1a247ad7c6ea99b32dd7991741ffc2313dfdc0848ad065ed"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-numeric-separator/-/plugin-proposal-numeric-separator-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-numeric-separator@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-numeric-separator/-/plugin-proposal-numeric-separator-7.18.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-numeric-separator instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-optional-chaining",
      "version": "7.21.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a78cde79f33bda0a6611ed9f914aff3a7397a5611ff2702093b65856aa9f162c881bba057d565c0ab53ae215a7e71a78b50f4b915e1b4c86b9ac3d0a00da4a34"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.21.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-optional-chaining/-/plugin-proposal-optional-chaining-7.21.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-optional-chaining@7.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-optional-chaining/-/plugin-proposal-optional-chaining-7.21.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-private-methods",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9eeb6cbe4b4322db0d9f8ae9188b52355daccf55f04be9df534460f1a0b1dd6dcd38a57374c8c946ed0ee4e9200e9dd91880924db811a716685acc68291bdb78"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-private-methods@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-private-methods/-/plugin-proposal-private-methods-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-private-methods@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-private-methods/-/plugin-proposal-private-methods-7.18.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-methods instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-private-property-in-object",
      "version": "7.21.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1067ca8fff744b0d5070045a160300ad81c0d9255c00e4b50945953cc766057ca36e16ad7ad702b772e1ab00bbb9ca23eefafcf04c083fb0c59535e59e3726b"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-private-property-in-object@7.21.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-private-property-in-object/-/plugin-proposal-private-property-in-object-7.21.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-private-property-in-object@7.21.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-private-property-in-object/-/plugin-proposal-private-property-in-object-7.21.11.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-property-in-object instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-flow-strip-types",
      "version": "7.26.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7862b6e91b1b2246149ecdd8f2a2a5dfada3b830d82bec0474f1871ab873525e827b0645a39e5567b860f82c8c154e1d7794106a404df3a9c132946c16946f6d"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-flow-strip-types@7.26.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-flow-strip-types/-/plugin-transform-flow-strip-types-7.26.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-flow-strip-types@7.26.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-flow-strip-types/-/plugin-transform-flow-strip-types-7.26.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-flow",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07e3b60e73dcd221be61716a3b1bf658db8d53ded3a168cea26510efc0e8b8e10d59468ce6c56b99eb7d99ca26506405c2925dfff82f51a8170527733b57d12a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-flow@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-flow/-/plugin-syntax-flow-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-flow@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-flow/-/plugin-syntax-flow-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-runtime",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35668bdaa1ba1d1a4e3539e3e09bc353ab61e2361e64e260bb74219854c28a189bd1eae6b4e26a92d03905db869b7b2e86155ef4430ff5cf7e99f27f23db25ab"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-runtime@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-runtime/-/plugin-transform-runtime-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-runtime@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-runtime/-/plugin-transform-runtime-7.26.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-typescript",
      "version": "7.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34c93520667923fa078685c4125726fb15272ffb332fac5f9641599a8114f718f5a92257a624bbaecb29628f760780d1083bd99f67ab4f92ddb0279700a34292"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-typescript@7.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-typescript/-/preset-typescript-7.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-typescript@7.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-typescript/-/preset-typescript-7.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-typescript",
      "version": "7.26.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6cc13927d002f0287003b6843c9eb3ca6df0eda39b6542c785b34b5346ca5212ac024ca593351dabed247729a1f6bce2f2794d165d9b9a574504228d241529bb"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-typescript@7.26.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-typescript/-/plugin-transform-typescript-7.26.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-typescript@7.26.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-typescript/-/plugin-transform-typescript-7.26.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-typescript",
      "version": "7.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "863320472e616fcb8926351c756ba75957288bd6c6a49a7ca793a5d76dbd3e837a6b2b6c2f034c82675fb4edb7c2708b31f5664f064358c3cdabf0f5498eb425"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-typescript/-/plugin-syntax-typescript-7.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-typescript@7.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-typescript/-/plugin-syntax-typescript-7.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-macros",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a0ed3146a48af4d6f39034e0d738e686cf6369094e6097cc75a8915b6fa85b67147b5eb704dafb5b02c4c06c9effc7026d52e244c3c2bc66bfc01342c795eb2"
        }
      ],
      "purl": "pkg:npm/babel-plugin-macros@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-macros/-/babel-plugin-macros-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-macros@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-macros/-/babel-plugin-macros-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-remove-prop-types",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7aa8f4855709511e7bfd4836cc4d58b30b30e0b86eaaa1e10fef2fd76d13d5c97792383be90c2dc81add224e165702be94084125560277fbfee27738cbef09b0"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-remove-prop-types@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-remove-prop-types/-/babel-plugin-transform-react-remove-prop-types-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-remove-prop-types@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-remove-prop-types/-/babel-plugin-transform-react-remove-prop-types-0.4.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bfj",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23a30c2e49fe6a7ccd742529f61311cae8b51da344502728e749716ef352e3e1325e0f253779c9e3c3e33d6b5b1fc5154bd0ae32868a13d536577976f4369143"
        }
      ],
      "purl": "pkg:npm/bfj@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bfj/-/bfj-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bfj@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bfj/-/bfj-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "check-types",
      "version": "11.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fbaecfd4690945ac500fa3ca2b412df43870401faf1a0dcf339f9a6afa290a9653d658fd8dea9fbe98132c0584acd8fca80a649265e5bbf520ef892685a8245e"
        }
      ],
      "purl": "pkg:npm/check-types@11.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/check-types/-/check-types-11.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/check-types@11.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/check-types/-/check-types-11.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoopy",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d172cfb69abe765b42bec7c47370bcee3cf99520a312bfded1187cb411af72fe6a5c68afb14eb8c8080d382801e2e06473c6588da8d244158587821cb7ad27d"
        }
      ],
      "purl": "pkg:npm/hoopy@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoopy/-/hoopy-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoopy@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoopy/-/hoopy-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonpath",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d248e4607241900cb9d19e50cc0ad9eee766bf1ac9ce4a4a616dbb7e217ffc1acc63b4d089b60b97e158217376062626c0c215cd27c3f1a0d18fa2338015f6ff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonpath@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonpath/-/jsonpath-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonpath@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonpath/-/jsonpath-1.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4bd55b3c353469d144ae90da8b7a83923abcf86d3938db4acdcc8dacf2a0fd929afad7fcefd9d7d8a7b1354f796f7d54a1326344b2273411c71e314fa0277b95"
        }
      ],
      "purl": "pkg:npm/esprima@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/jsonpath/node_modules/.bin/esparse, /app/demo-app/node_modules/jsonpath/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "static-eval",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3205a943f6631a2792541dde38956ce0e0362d3fead6fc7df0a3c24d340fceafda2ebd185174ec82bc935ebe122df47465f5140a279d33d9ff001783232cb898"
        }
      ],
      "purl": "pkg:npm/static-eval@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/static-eval/-/static-eval-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-eval@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/static-eval/-/static-eval-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8d9480d3c145893749913d039db500736d41ef7466363f55574b253cdd0df12b133b5875f6425f1d2aaefcd90f5381050d38b133118bbd6f32cd8f5abcf08e7"
        }
      ],
      "purl": "pkg:npm/escodegen@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escodegen/-/escodegen-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/escodegen, /app/demo-app/node_modules/.bin/esgenerate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "escodegen, esgenerate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.13.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f80e528dae073f5334f0c697c9aee9e4bbe3b8cecaeaaff611a0b4fa2a2f8ffc0e70cb13cccbc315b6ac8bfa126a98b03a5b76e7622ab0aa8f8c297b86e292d0"
        }
      ],
      "purl": "pkg:npm/underscore@1.13.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.13.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tryer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "737cdac9bf3f9165a9c9c59883cecfef51354b564be9be882717dbe5fbec520b1fd12d8c5466838435d78c3329742a5f597aa9b5cfb8997c268b2d72a57a9100"
        }
      ],
      "purl": "pkg:npm/tryer@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tryer/-/tryer-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tryer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tryer/-/tryer-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "case-sensitive-paths-webpack-plugin",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae820538d85cc688342524966ef5408773a872e9264a0a6a387e98a4c902bdabffc92215dc92a0e0373cbd8b508d88bf531a4d137eabffdbfe56a4d0aa09189b"
        }
      ],
      "purl": "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/case-sensitive-paths-webpack-plugin/-/case-sensitive-paths-webpack-plugin-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/case-sensitive-paths-webpack-plugin/-/case-sensitive-paths-webpack-plugin-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-loader",
      "version": "6.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09327e0044098eae4dccb81ae69137f6a762495e7a17ccb0088b2a348445d2bec10e05ac376e5a6b34e8a80160ed9aed03f534d7ac6e741ddf7e0c1e391c57ee"
        }
      ],
      "purl": "pkg:npm/css-loader@6.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-loader/-/css-loader-6.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-loader@6.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-loader/-/css-loader-6.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "icss-utils",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b281617e509558b7d134e3d4de2bf967d554753e38c4545bce32ec1334abe4042682a3cc4c7754dcf313d427f5b2cc7c7cb3490c0d63b9fb5897e3d472fdcca8"
        }
      ],
      "purl": "pkg:npm/icss-utils@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/icss-utils/-/icss-utils-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/icss-utils@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/icss-utils/-/icss-utils-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "8.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7657bd037c98c65052aedf05bbe2298c64fc498f213749a5680e8663cb743f93e320e65e9942f3fc4d819e6ff675c50e7a76bbe4e4cd90723beae64135452adc"
        }
      ],
      "purl": "pkg:npm/postcss@8.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-8.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@8.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-8.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a9a6889c306a59bdb175977cf8c7b368dce9488cfed026f0bd5d1ec0859af590bd77dca1e728fced90a0dcf88af8689ff55614f24abb4a86bb32726acc41fbe"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.9.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/nanoid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nanoid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-extract-imports",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93790d7b468d1500c06466e29f8f292f654d89d4c5d30e3f780483b31972b29a1bcd4df06502ce1a3ecbf607d17b4268f7fe2eb9dd3d0ec8c5347ef08a71aff1"
        }
      ],
      "purl": "pkg:npm/postcss-modules-extract-imports@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-extract-imports/-/postcss-modules-extract-imports-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-extract-imports@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-extract-imports/-/postcss-modules-extract-imports-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-local-by-default",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e647099bfce4f8624349fc3e57fe367c9e5f8632f961b14397c9d57579093cb2d6f957fd9930f95ded30a886839cbb8bd94e9c0cda53afe510fafd87588061cf"
        }
      ],
      "purl": "pkg:npm/postcss-modules-local-by-default@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-local-by-default/-/postcss-modules-local-by-default-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-local-by-default@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-local-by-default/-/postcss-modules-local-by-default-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-parser",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2c2e36702b447e265c6561c4ee567c93daffa1b6976b8c338ab8c70e55d623b79d8b87c856458a7104fa0ac7f660f9b723737c31e9f9907af326533b52fdc70"
        }
      ],
      "purl": "pkg:npm/postcss-selector-parser@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cssesc",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd36ff25c8cad75d67352706a1be4c36db27b4d3356823540e2a41fd39306458720ebac4e3b48ec7fd7cc05d9b6e381cdd9cc248a5b54f99ede446c5a00cff56"
        }
      ],
      "purl": "pkg:npm/cssesc@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssesc@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/cssesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cssesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-value-parser",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4d342b3abaeadf9156de5c6e12f09153f6dd7d9b8e480a789ff3358b779a0f499e74427c0c7caf87de3bf8d3c7788f0ffb06db6fe5ac52e48887a0b69534779"
        }
      ],
      "purl": "pkg:npm/postcss-value-parser@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-value-parser@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "postcss-modules-scope",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bd8d9b2d0956aa1a34c0ba7cbc31d804f3cb1c2670a2412952ace59c4d080cdaddf65017be31498548ee6ded53127c07ff149288980c416aff28a021c95c224"
        }
      ],
      "purl": "pkg:npm/postcss-modules-scope@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-scope/-/postcss-modules-scope-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-scope@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-scope/-/postcss-modules-scope-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-values",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "443c47900884188efc812da87f2bc2b2eee2c9c46fee8ab0e713169fd88ca11d0dffb99ff43e7479c42a528e4167d661daf1f86c2511fe4b42a9b07d9bcbc98d"
        }
      ],
      "purl": "pkg:npm/postcss-modules-values@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-values/-/postcss-modules-values-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-values@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-values/-/postcss-modules-values-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.5.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@7.5.4",
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "6.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "4.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-minimizer-webpack-plugin",
      "version": "3.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6ee83ef5cde21f82780dd9735125e7dcfe163b61bb3177be099b8aa78085f250493b7ecb37554cee1f12c0abf47c3406dae1053d39449a31995ba5173b6cce1"
        }
      ],
      "purl": "pkg:npm/css-minimizer-webpack-plugin@3.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-minimizer-webpack-plugin/-/css-minimizer-webpack-plugin-3.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-minimizer-webpack-plugin@3.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-minimizer-webpack-plugin/-/css-minimizer-webpack-plugin-3.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssnano",
      "version": "5.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fe04a80370b0d003e78389f2f1d043b85d2039e9beeebaddc14051fec1b49a493b862ee8b24daff06d162d8545d7f0b0bd98b83e59629ef21faa26ec1301b1f"
        }
      ],
      "purl": "pkg:npm/cssnano@5.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssnano/-/cssnano-5.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssnano@5.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssnano/-/cssnano-5.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssnano-preset-default",
      "version": "5.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b744857ac8ff655d8e4f296a4153ab160121e6e6a7c5b3ba64075e0ab36c510e9f56e5f0613c493cd006bc64f11db0faf2574824d79cecfc9864306b7c343ee8"
        }
      ],
      "purl": "pkg:npm/cssnano-preset-default@5.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssnano-preset-default/-/cssnano-preset-default-5.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssnano-preset-default@5.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssnano-preset-default/-/cssnano-preset-default-5.2.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-declaration-sorter",
      "version": "6.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aed76d873c4abb2aba233a97ea311c233405fd8a9c725b9e7f209885ea2f04e2e1153fddad003dce3fd46d101af49ec2d28e841babb713a83ebca91acbbfe4de"
        }
      ],
      "purl": "pkg:npm/css-declaration-sorter@6.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-declaration-sorter/-/css-declaration-sorter-6.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-declaration-sorter@6.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-declaration-sorter/-/css-declaration-sorter-6.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssnano-utils",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "250351d7dfd8661cf8a6c2d7feb43d33cddedf3d967ff1dd25baf2ced7b86b7352b9a7f2a7dc3f23853e871e42d92f60e35aa5b2d1fb0c45a765a6a3f373ae10"
        }
      ],
      "purl": "pkg:npm/cssnano-utils@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssnano-utils/-/cssnano-utils-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssnano-utils@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssnano-utils/-/cssnano-utils-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-calc",
      "version": "8.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a658c489981f0c4679d42e5771d25408ca148dbee0e5f477eb6646aaa84fd61c0853a18b00bc3abec80b00fe423220d0ecccea77461d0616836e1f9629b26dd"
        }
      ],
      "purl": "pkg:npm/postcss-calc@8.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-calc/-/postcss-calc-8.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-calc@8.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-calc/-/postcss-calc-8.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-parser",
      "version": "6.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43ca907cf899f931ceff766b3ab3b470924a7e96026a0b4c5245db9c47e68148f05e0eb3fd605e3b24bd00f0413c24d288357eb384b0406bbcc85b2231122e76"
        }
      ],
      "purl": "pkg:npm/postcss-selector-parser@6.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@6.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "postcss-colormin",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52c5901b402a4c5426a417a078b2dcd7e7378c8a81341d33943191591f9d437a512892f5a1e333caa987de8d8f21f9fd30174dad53d68436d3efaf4bc424cb25"
        }
      ],
      "purl": "pkg:npm/postcss-colormin@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-colormin/-/postcss-colormin-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-colormin@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-colormin/-/postcss-colormin-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-api",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ec4f0b8883f05964afefade5536186d25a87b617eef53fb2b9406117fa94f6e740d96df535310e69ace2a93d1f8b2fab9628adca330302012ef8401dd49b5bb"
        }
      ],
      "purl": "pkg:npm/caniuse-api@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-api/-/caniuse-api-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-api@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-api/-/caniuse-api-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.memoize",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7b8fe3739a09d0cd30185dcb0760b8229a5b4e5753171ed94e59fe868cbf4a8fc18ae45227c39268b71bdb3acf88bd5d7f0f3a34e3f7c219f2d5b3b6976f802"
        }
      ],
      "purl": "pkg:npm/lodash.memoize@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.uniq",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5f05a5d077daf277d765483be7bc8d25bf17cb2656006735e89946332cab5478e42f38fe698aa016b86b6b8567aa6972bd861a0cfe2c89739015f977ec5f71d"
        }
      ],
      "purl": "pkg:npm/lodash.uniq@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.uniq@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colord",
      "version": "2.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8de0b56b15e99dbd3fda79ff6352cfb8b7605c12c7eda0dc1eee0a10a7eac37094857ed9a5f05294f2b2a9713a6ed2201337d6b6b5f7fedc8109a0af5ef3243b"
        }
      ],
      "purl": "pkg:npm/colord@2.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colord/-/colord-2.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colord@2.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colord/-/colord-2.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-convert-values",
      "version": "5.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f36a42d7190966d70911f88bc3a5179d755749c82d06b8e53b90819ae0d073e7656fcf19621785b234e7e34fb30558b70e47c5ee27b33b49c950f2dc24ade9bc"
        }
      ],
      "purl": "pkg:npm/postcss-convert-values@5.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-convert-values/-/postcss-convert-values-5.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-convert-values@5.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-convert-values/-/postcss-convert-values-5.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-comments",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8bf36d3c3956c7545d9441fd620e645c6dd8c992e045e884b6f720434a2594233a5868086d365e89627626d7616791e0b042a1792de9253aeeab02a81f059a9"
        }
      ],
      "purl": "pkg:npm/postcss-discard-comments@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-comments/-/postcss-discard-comments-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-comments@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-comments/-/postcss-discard-comments-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-duplicates",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce65f7228488d9aa1e9f11d5e82ee9967807596854395dec3f54fccb689fcf1cdbb67ba193511d3f09b44b56c850d689d9e35b59e18b130cf0f21b8f0faeda43"
        }
      ],
      "purl": "pkg:npm/postcss-discard-duplicates@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-duplicates/-/postcss-discard-duplicates-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-duplicates@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-duplicates/-/postcss-discard-duplicates-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-empty",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccfcf85a58e24ae2d6b08d22af831c9ebe2a410e5ed5491cde2ed47c4d9772bc0a2b62c83c8a84e63c4c4713ba19b23772ffffced5c3b17c04593dc11ce1a1dc"
        }
      ],
      "purl": "pkg:npm/postcss-discard-empty@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-empty/-/postcss-discard-empty-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-empty@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-empty/-/postcss-discard-empty-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-overridden",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db59ce2fb46a591d646ac21574ab3c1cda902611712ecc917c09d40e6e057b8b7898258bf4e2621ef9473e371df33739332bbcf5bffbc190e73928c581e591b7"
        }
      ],
      "purl": "pkg:npm/postcss-discard-overridden@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-overridden/-/postcss-discard-overridden-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-overridden@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-overridden/-/postcss-discard-overridden-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-longhand",
      "version": "5.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60223d81907e3cb36c92b2b4041dffd8eccf9c684f9011309b085f624d629411d8540641effb644c71410270abbc104e99e632318c370cc8d3e794b2c4c0738d"
        }
      ],
      "purl": "pkg:npm/postcss-merge-longhand@5.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-merge-longhand/-/postcss-merge-longhand-5.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-longhand@5.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-merge-longhand/-/postcss-merge-longhand-5.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stylehacks",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b01a5c7791f1ec6eac7a8edbd4b929b6dbd3cfb8a40f42e51f946675c04d6fa7c5474165ecb4301c316bdf4d2ae1cc14aa2f8862b1469ac20789e3017e737f07"
        }
      ],
      "purl": "pkg:npm/stylehacks@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stylehacks/-/stylehacks-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stylehacks@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stylehacks/-/stylehacks-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-rules",
      "version": "5.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d11d88b98a6053ddf2f658556cefceca54ed28c55c1dbebbce35887c288a47dad62f7194935ebbecb02a0ff05c1e2cee91d6448d3f11bb7a07468018a09cb8e2"
        }
      ],
      "purl": "pkg:npm/postcss-merge-rules@5.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-merge-rules/-/postcss-merge-rules-5.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-rules@5.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-merge-rules/-/postcss-merge-rules-5.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-font-values",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a5de6613831d776403cf8ab495b07a85ce5f810410eb5ef6f24af3c616741c4c8e2236c96b3da16ae26b9390b6662a51a4e20c85018501307df4f87bab444c8"
        }
      ],
      "purl": "pkg:npm/postcss-minify-font-values@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-font-values/-/postcss-minify-font-values-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-font-values@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-font-values/-/postcss-minify-font-values-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-gradients",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "546bd7313a42128e2a1d33526bd0346b70fe77118564263047a268924fbfde807a7e5bb6fcf9cf5c0876c7bc79d84918e719481cb9be2def2d2717bfed3361cf"
        }
      ],
      "purl": "pkg:npm/postcss-minify-gradients@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-gradients/-/postcss-minify-gradients-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-gradients@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-gradients/-/postcss-minify-gradients-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-params",
      "version": "5.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa678f037320766566bfa83edf4ae7e7b5128ce192032bb152691f896a736a567c6a206474f6235d6b47bb02469b5bf93a3cb46742da49884768b2500743fc27"
        }
      ],
      "purl": "pkg:npm/postcss-minify-params@5.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-params/-/postcss-minify-params-5.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-params@5.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-params/-/postcss-minify-params-5.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-selectors",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cf26eece8d9253b155263dd9b64dc6a2a21230c4ffaff216bd35e850db27bdb33bf8a2b8ab454dd20ddb5498a1fed749f39f46c0c8e5d9d1412becea6f2de86"
        }
      ],
      "purl": "pkg:npm/postcss-minify-selectors@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-selectors/-/postcss-minify-selectors-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-selectors@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-selectors/-/postcss-minify-selectors-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-charset",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99281427ea5dfe5751195c76ea9db0cfd74d67b8e2e8f9fc55605a8cc5c57fc8e4eef5284ab67696dff0651ec3b6565829eb26648ebcd2a8ebd827851767db52"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-charset@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-charset/-/postcss-normalize-charset-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-charset@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-charset/-/postcss-normalize-charset-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-display-values",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58fe0a20ce28d9d6b34175a615aa8c99cbec2a685d20d15b96049e4609fc049eafc5a332689930033a4fa6ebd22281bfae65f733e22b459133d87d2096b40d10"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-display-values@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-display-values/-/postcss-normalize-display-values-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-display-values@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-display-values/-/postcss-normalize-display-values-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-positions",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e94a426f41b87a87d30902c556e237115359cc134f88829c03500a5646bedf57d35724a986bdd552000850b061c5990a8302c89a1ccc476070d4e44afb7ec836"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-positions@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-positions/-/postcss-normalize-positions-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-positions@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-positions/-/postcss-normalize-positions-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-repeat-style",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "985a4bb29196910b4171621114b99ec28f1a0b72263768bf277bfc602154c039cfbb75f3e2b2e88433b6ea51a3c0db10c41dd817428a470b291b3136244b92d2"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-repeat-style@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-repeat-style/-/postcss-normalize-repeat-style-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-repeat-style@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-repeat-style/-/postcss-normalize-repeat-style-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-string",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1888824e7f84fd4f53788be69b78873b5609bfc4f0868a1e1b673e4d9b4fc045527b2bac6b0e52f0bf0a8ec9dbf22f744735ff2a664eafa3769ab62c3f828df"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-string@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-string/-/postcss-normalize-string-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-string@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-string/-/postcss-normalize-string-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-timing-functions",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ce124cc9e12017bf9c641e5d166bd7192c5dd6081845de8d52295c4a4006bed2960a96e793a4282f9050077e4f98eb87b35fdfa72131ab0d97951a02132578e"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-timing-functions@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-timing-functions/-/postcss-normalize-timing-functions-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-timing-functions@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-timing-functions/-/postcss-normalize-timing-functions-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-unicode",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa708be63ce435498a56166810da7598988634f72c242b3569a46651199e246112db767f6a36a59fe10f4c3fab05e3644abc88fb6593756fa5c1c55d3a292ba4"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-unicode@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-unicode/-/postcss-normalize-unicode-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-unicode@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-unicode/-/postcss-normalize-unicode-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-url",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6ea467833be3d5b613b14a676ce3765e31e65f287fbf0ca806443ed3125924c92e3a25701484ccc82a209aec169b3de232dc041c4e45f055537b0dbaac8827b"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-url@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-url/-/postcss-normalize-url-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-url@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-url/-/postcss-normalize-url-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-url",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e52fe5f03b2dcdc4043cc6e0b4a243e02b8ea2b953402b4d5837b46e79806aa85786b018d5f5798203301d82dfbaebb6c297990f87d12a28a0f09da3c6d48ec"
        }
      ],
      "purl": "pkg:npm/normalize-url@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-url@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-whitespace",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f37649e2ddcd5031132074dadee120e9ab168d20582f911d915074b039dcc7d111cce2815492147833bd47203d670b6283c125d5defd1c1a742448bcc2f1909c"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-whitespace@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-whitespace/-/postcss-normalize-whitespace-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-whitespace@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-whitespace/-/postcss-normalize-whitespace-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-ordered-values",
      "version": "5.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f543bbf555213f0124cdb6f744da6aaa085cea57187a3d5abde42d79663ee0f388c25aa4604db51ca59a2c317a95636ea82a1b100c93a2f561b48df645bbf645"
        }
      ],
      "purl": "pkg:npm/postcss-ordered-values@5.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-ordered-values/-/postcss-ordered-values-5.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-ordered-values@5.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-ordered-values/-/postcss-ordered-values-5.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-initial",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "744ff2d9745aa808ba3af8f30f6da98d3510f1e39f73a9bf9dab461e028504af43c459889baf5899a45542b1a016511f7351de3c8bab6344e60de44e2b4e6b22"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-initial@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-reduce-initial/-/postcss-reduce-initial-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-initial@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-reduce-initial/-/postcss-reduce-initial-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-transforms",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9f6dd6e6822af902fa56f512ed74e371d50a181b6fc4b6aa4d41b140483962c416c062e4dc2747440b096a36a1fb55b6949c49e1f12af139edac4489f6e17c9"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-transforms@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-reduce-transforms/-/postcss-reduce-transforms-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-transforms@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-reduce-transforms/-/postcss-reduce-transforms-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-svgo",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fbe4ab07d739b966b1f2c4f6a4031256b64c977b0e6ac12ef4bf9e9ec70bf0e78d9df4246d4e8efc2b459e171641e06ec95ca28c6c466d65ac9319d224cbf78"
        }
      ],
      "purl": "pkg:npm/postcss-svgo@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-svgo/-/postcss-svgo-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-svgo@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-svgo/-/postcss-svgo-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "svgo",
      "version": "2.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f2cc4e0d5462d4172f87fd4cb837a7371b41c47a9aec55f81ee8b9aafb415d410ff3aa855807ad88b0164e46c88bfa8f7ab3a7dffd5ebfdd4428fc2d1c80200"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/svgo@2.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/svgo/-/svgo-2.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/svgo@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/svgo/-/svgo-2.8.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/postcss-svgo/node_modules/.bin/svgo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "svgo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42b59707e6504953e6216221b443bd1fe8301da3066221790a1be827e2bd6461c6fec56c6baca27ac003d460bfc78eac113d345e5c28d6ee3d455555cef71293"
        }
      ],
      "purl": "pkg:npm/commander@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0fa4e62d9ec5689edbb698e0e1035f49aea5b136c7dd6ad44a77ae249a945b4208752ad22d928e6c4e71293dda52689b334ce84432517f44fcf6f2a8f81ea85"
        }
      ],
      "purl": "pkg:npm/css-select@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d352b81127baf876c64a53a1a39a97d12b53bbea1f7b67c31f4b51b4168cd1fa8176906e957def0913acf0ae46f18a0ce23c78a7089fa008f8c0f446810ed47"
        }
      ],
      "purl": "pkg:npm/css-what@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1abc28c5837eb969733bcba1517465d0ffa41c4e06b553df63354b714c4f2fb28d7472a3ebabef9618b07881ea6185d6970f93f222cca78d8b9baee0870e1631"
        }
      ],
      "purl": "pkg:npm/domhandler@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-4.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "2.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3de828e87e9ef63392088698e0a1b06299811fa0f8f1d55c740525fd3f7d1605d656d9620a5344f505dd24cf678d67d8a48ca8076c4c8ac7c041e87d4bde1dc"
        }
      ],
      "purl": "pkg:npm/domutils@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-2.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "547c01dca7eb70e3a47a5106d9939fc6a2d975f92297c3ed262e0ff0dd8c317b9c66adb22e9ef90a5562525395c32a071038d8538df702afb9cd63fad7e4466a"
        }
      ],
      "purl": "pkg:npm/dom-serializer@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96a8eb8e668ea009d67cc9813cbf97367ca7661dbeb30c625f7594134b38c841c8ea6f80c2b2b65193a2988465dd7ff841cb55a92f008998c5ab2386acc5dbff"
        }
      ],
      "purl": "pkg:npm/nth-check@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e91dc9e4ce0071bb4b51d66646fd92ca079568cec886b2d7bbd0669ce1a698009a93c7e252d3ac60d5944b8b8aeeea5b9872016cb05e15e23fff8efb04a2c1cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sax@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "postcss-unique-selectors",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4988e0e510baf3f0bd87c317cf9e1396658583c551d62fcdee7cebfce0dadc822a48ed369e46c6ad0212b84ebdbf6626257692bfc01bf0e410f7a9f68af7a18"
        }
      ],
      "purl": "pkg:npm/postcss-unique-selectors@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-unique-selectors/-/postcss-unique-selectors-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-unique-selectors@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-unique-selectors/-/postcss-unique-selectors-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lilconfig",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bad58eb7f187cee5319cb2b107a764f3546839ea0d78781bad78ae1a4e32c85e6a951cfe888556bb9e84d9fa861c5ad7cf440d5212c1ffc9caaaf447eba24a19"
        }
      ],
      "purl": "pkg:npm/lilconfig@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lilconfig/-/lilconfig-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lilconfig@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lilconfig/-/lilconfig-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dotenv",
      "version": "10.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae5062f5df23a6ff527f59253e335f140b960e328bc1320927f571b684f0211ea19d9c5c10e402660da820bdcc581630e46a540ca3849cd0fb2d74db229434dd"
        }
      ],
      "purl": "pkg:npm/dotenv@10.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dotenv/-/dotenv-10.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dotenv@10.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dotenv/-/dotenv-10.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dotenv-expand",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "617425d4349ae3f3d0c917e0aefe9aa0d8e16aca7fa78aacf458c9e2ae1c424fbc9b8afa938652884cb2b4a1bc7fc5bd822f16b10b4839b36629dfad33335398"
        }
      ],
      "purl": "pkg:npm/dotenv-expand@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dotenv-expand@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint",
      "version": "8.57.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca9a30c83c69552629917afd58fbf63c0642b4d8a9d4cbf92935b4482bab5efffd88ea5cac7f4f6aa504964b2a101ea90a1a87183442153cab6651a19cb34688"
        }
      ],
      "purl": "pkg:npm/eslint@8.57.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-8.57.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@8.57.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-8.57.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/eslint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "eslint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version is no longer supported. Please see https://eslint.org/version-support for other options."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@eslint-community",
      "name": "eslint-utils",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46857c5ecf5e370883be1bfb33ec5c2f83d6c91c885d163f14ba776ee5388751187dd17bba7594cb774e8cfa9bdc2eeb3147b021cab05bce743e04bc875a35ca"
        }
      ],
      "purl": "pkg:npm/%40eslint-community/eslint-utils@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/eslint-utils@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "3.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2973e2d77a2ca28acc4f944914cd4eacbf24b57eb20edcc8318f57ddcbb3e6f1883382e6b1d8ddc56bf0ff6a0d56a9b3a9add23eb98eb031497cfdad86fa26a"
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@3.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@eslint-community",
      "name": "regexpp",
      "version": "4.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0826420c9b9db81f4e524164636220a69359322da5050803daacf05e41226b5e9c81eda98a363f6978bde8224caae0cc9f79c97653d5d40e4aac9117c1f2cdcd"
        }
      ],
      "purl": "pkg:npm/%40eslint-community/regexpp@4.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/regexpp@4.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "eslintrc",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbaf59dfd312eb0549b6ca14975d0beb459d92125574f1b6e10e1e6531f79e717a969bd24a110adf04230d7f494560143ef3e1ec23a8b8fa54f48aea69916fb5"
        }
      ],
      "purl": "pkg:npm/%40eslint/eslintrc@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/eslintrc@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "9.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2bb99685923a2b4e9177da40d2239ffbe558b019e6608a7186cb636839283743d6e7c259e60e6e072e7925d111379fe9e30d7474dfb698d7ec79f19ff315dc1"
        }
      ],
      "purl": "pkg:npm/espree@9.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-9.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@9.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-9.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aeaf6cf893617f4202863b435f196527b838d68664e52957b69d0b1f0c80e5c7a3c27eef2a62a9e293eb8ba60478fbf63d4eb9b00b1e81b5ed2229e60c50d781"
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "13.24.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0213b9414723f2596b6c6d3d89684f536076d38275c673de2fc910995a2b4accbe4a38f5b24f2023287a714a1c1a61f82f452e840272fa124c440e26800e2615"
        }
      ],
      "purl": "pkg:npm/globals@13.24.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@13.24.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.20.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35ef9e138af4fe25a7a40c43f39db3dc0f8dd01b7944dfff36327045dd95147126af2c317f9bec66587847a962c65e81fb0cfff1dfa669348090dd452242372d"
        }
      ],
      "purl": "pkg:npm/type-fest@0.20.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.20.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "5.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c053354a904c3c245ad71d608da2d3a63f9d4044b0d10324a8d676280bbde832f240ee2404bcb91969924710a721172f467fa630f2e4706632344227682afa"
        }
      ],
      "purl": "pkg:npm/ignore@5.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "js",
      "version": "8.57.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77dcda31149320a0cb85cb731f5d8cb57bc929249485a1dc8d5fb667e18af84118ed72a93f9c91e31f8ddd301c1d372ef7ade722bf9331c09be03042617d73e9"
        }
      ],
      "purl": "pkg:npm/%40eslint/js@8.57.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@eslint/js/-/js-8.57.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/js@8.57.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@eslint/js/-/js-8.57.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@humanwhocodes",
      "name": "config-array",
      "version": "0.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d92c412a1564058b22ba8796087b29cac7b265bc26162f470899f4915d9f65e1283679f905193b857fabf35e32b572ae8862453e120fc98b35f0f930f6bd137"
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/config-array@0.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/config-array@0.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use @eslint/config-array instead"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@humanwhocodes",
      "name": "object-schema",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f77cd874c112fdcd43ebdc9988a0c18f4576e2fa8dcc1fe4a05dba28f69a8007dddcfff8814961dc3cace688002be1318bd432ce50fcc7fd3c66def020a70370"
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/object-schema@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/object-schema@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use @eslint/object-schema instead"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@humanwhocodes",
      "name": "module-importer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f1bde57857cbf961be277054d3deb3d281904ea429237cad32e28555549c08b8354144c0d7acfc9744bf7cf22e5aa7d9bd6e7c8412359f9b95a4066b5f7cb7c"
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/module-importer@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/module-importer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@ungap",
      "name": "structured-clone",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a6a0df2a688028ed64d859b019b86f0f604867e5f933edd66ba93059eddb6dfff94bd86c26b3521c9d0e721ea8c37d7f05b798f86330ccdb77fcef305f0def6"
        }
      ],
      "purl": "pkg:npm/%40ungap/structured-clone@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ungap/structured-clone@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c92f90e62de105fec6064778286f1aede04d3563462d3684c306165228c860cef3ae56033340455c78e33d6956675460ed469d7597880e68bd8c5dc79aa890db"
        }
      ],
      "purl": "pkg:npm/doctrine@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "7.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74eb76d4eee54cc84333e5fd981e065fe0d9ad9b425093cbff095c4eac72af1e48bced0862d20b76dad0190a7ef27e52d20c1256639ff4d42b8cc3a07d066522"
        }
      ],
      "purl": "pkg:npm/eslint-scope@7.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-7.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@7.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-7.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esquery",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71af69c3d7e898570a3ef14b5e104a50af7466f1a26e218ebd124d6e396363bb3bbaaff960ee013b3718b49a84c5dc7df6b17a6807274711e67141dccfab10b2"
        }
      ],
      "purl": "pkg:npm/esquery@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esquery/-/esquery-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esquery/-/esquery-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-entry-cache",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec6a6cfd75b299b2e4d902d82b8373a4c3ab623321748c57b88bf2d9006c2c4ea58eea1d2af7645acfdca72249dc25485691f43a2d47be0d68bdb3332dd14106"
        }
      ],
      "purl": "pkg:npm/file-entry-cache@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat-cache",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09870435af85b5c50a2e6861ab272da5c96cabb405dfca4a8d91ec18d892405e6be05b6828359a6c50e5de1cda11032f4f52c7132b30e6dc202efa5861be2f6f"
        }
      ],
      "purl": "pkg:npm/flat-cache@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flatted",
      "version": "3.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e30ec7bb47385c3e4209c32e6deca3d641267d7006f341771a7ec7ad4280fbb0e2514251a290d6f1ef2669d8ea2d0e7272ac371bc91ab74ed6f5f2260eaa4c4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flatted@3.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@3.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "keyv",
      "version": "4.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3154790747f1097f608d5e75b144b5ba9a0ec9c82094706d03b441a62f672d528d4f3538a7d4f52297eafffb8af93295600bf7e7d648ecc7b9a34ae8caa88a7"
        }
      ],
      "purl": "pkg:npm/keyv@4.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@4.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-buffer",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1b57905f4769aa7d04c99be579b4f3dd7fe669ba1888bd3b8007983c91cad7399a534ff430c15456072c17d68cebea512e3dd6c7c70689966f46ea6236b1f49"
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f1c08f043a1550816a7a8832feddbd2bf3a7f877a017eb3494e791df078c9d084b972d773915c61e3aefa79c67ed4b84c48eeff5d6bb782893d33206df9afe0"
        }
      ],
      "purl": "pkg:npm/glob-parent@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graphemer",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12d2b0a0eea4c422fd58ee718a98874d9952cc19bb58b4fadbb4ea0bfb9545dd072a6abc357c9e6e7358c43a018bbc2df1e4d6ad4aca5c2395685abdc759206a"
        }
      ],
      "purl": "pkg:npm/graphemer@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphemer@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graphemer/-/graphemer-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05d6e8cbe97bb40dce196e858f21475a43f92ee0728f54e4df72e3caad1ac72cdd93dfff2528b6bb77cfd504a677528dc2ae9538a606940bbcec28ac562afa3f"
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9b4f6b87e04e4b184ee1fe7ddebdc4bfb109495c2a48a7aca6f0e589e5e57afbaec3b2a97f2da693eea24102ddabcdfa1aff94011818710e2c7574cb7691029"
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be47033eb459a354192db9f944b18fa60fd698843ae6aa165a170629ffdbe5ea659246ab5f49bdcfca6909ab789a53aa52c5a9c8db9880edd5472ad81d2cd7e6"
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5794a1cf6ec065ea8d6c176944d9026ccc705679f39f10036befc7552be7121c8b15c83fef0b9c50e0469954df4bacead7aa765b2415fbbe69ee0aefd3a87b"
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.merge",
      "version": "4.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0aa63a97455beb6320ac5f5b3047f5d32b4bdae9542440ce8c368ecfa96efb0728c086801103c11facfd4de3e2a52a3f184b46540ad453fd852e872603ba321"
        }
      ],
      "purl": "pkg:npm/lodash.merge@4.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.merge@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "396343f1e8b756d342f61ed5eb4a9f7f7495a1b1ebf7de824f0831b9b832418129836f7487d2746eec8408d3497b19059b9b0e6a38791b5d7a45803573c64c4b"
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.9.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e88a50ee6294c5171934b20e6d1d21cfb971b1aa5248860d649c173c6785d264d5a862852178f50d070ca13db64b744e70bc98febcf43d669667d6b25a669df6"
        }
      ],
      "purl": "pkg:npm/optionator@0.9.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a083f392c993838fccae289a6063bea245c34fbced9ffc37129b6fffe81221d31d2ac268d2ee027d834524fcbee1228cb82a86c36c319c0f9444c837b7c6bf6d"
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c25eee887e1a9c92ced364a6371f1a77cbaaa9858e522599ab58c0eb29c11148e5d641d32153d220fcf62bcf2c3fba5f63388ca1d0de0cd2d6c2e61a1d83c77"
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "word-wrap",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04ddb607979a30c23d50cb63ac677983978260fa423c3532d052576d8b1a4f9cd8c6314e7244b9dd2403137a56915a16a475d56f706b61c10de13c1ae7907970"
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37ef148ac0170c693c3c55cfe07033551f676df995277cd82c05a24c8a2a0b9bf98ac8a786bfabe6e68ef3eeebdc131fb8d22e7c8b00ed176956069c0b6712a7"
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-react-app",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2baacdcef90878769377c9bf404875664a34288ec10025a4927792b3ab3d70a642fc9dbb5f779947a529b758e4999ff814af9750e3cfc4c10defe95b5177d294"
        }
      ],
      "purl": "pkg:npm/eslint-config-react-app@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-react-app/-/eslint-config-react-app-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-react-app@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-react-app/-/eslint-config-react-app-7.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "eslint-parser",
      "version": "7.26.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42c7d066be0088ba4aaa7edfcfe8fb48df9fe37cf60d90a01b261b349daf24ea8a7c6e04e8c65eaf5fa3a8666a2896b1abf81d3b60c2fe752ee39fa938be69d9"
        }
      ],
      "purl": "pkg:npm/%40babel/eslint-parser@7.26.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/eslint-parser/-/eslint-parser-7.26.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/eslint-parser@7.26.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/eslint-parser/-/eslint-parser-7.26.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@nicolo-ribaudo",
      "name": "eslint-scope-5-internals",
      "version": "5.1.1-v1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e78fc946f90b233cc35ac84259fba169d7eb7d954f884958f057209a0d47ae8125cbf1034accf384102c6ab0aec7e0ff90eb254d1aae373bb21929944934c71a"
        }
      ],
      "purl": "pkg:npm/%40nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nicolo-ribaudo/eslint-scope-5-internals/-/eslint-scope-5-internals-5.1.1-v1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nicolo-ribaudo/eslint-scope-5-internals/-/eslint-scope-5-internals-5.1.1-v1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2b4a6441cd7803cc8b03ea619d2607afce07b3239df809eaf92ffbf2317d241f34ff8e2078de346177d61494c1982d0cb6ce9acd9a84fca9ab021ad63e41a2b"
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rushstack",
      "name": "eslint-patch",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf19c7be831056a7b04c9aff5b8a4a8c5d1b30688a26fd565fb6d2ae4978e878344231126f30513962b45a0e11a61cd2392e498b2ede1629a633752032b3196d"
        }
      ],
      "purl": "pkg:npm/%40rushstack/eslint-patch@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rushstack/eslint-patch/-/eslint-patch-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rushstack/eslint-patch@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rushstack/eslint-patch/-/eslint-patch-1.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "eslint-plugin",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e26730522636bf2db84d3ef93ac9cd09ad7f57aa143485d87a336b2f61fb0719e8da28520019df4c43e11120cccb1a537f919a18220771155d0fba58d32976a"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/eslint-plugin@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/eslint-plugin@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "parser",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5652445747ce43b044c4eb076001ab81b1226688bc0fe065dbe7fa57646b5dead14b2967a7e6411e63ef6886bc733d008f1ed63bb67946a7e0620ec40f59d184"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/parser@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/parser@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@typescript-eslint",
      "name": "scope-manager",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "557baf56f65e40241be5981fe07031734e2ae63f96acd02d361f4ec02b028292aa112313bb7b45fe3859df11ba4f8359c1697ae4183c2ae4b6b84be149f2e5d3"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/scope-manager@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/scope-manager@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "types",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3b3559e071b55751a86b453a882b6ee00f6b790aed72b825f16cb705b42cd91a57f25565a1f262c7928c738ec07a0c3367bdd2fe7d6f0c8b03c427218940381"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/types@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/types/-/types-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/types@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/types/-/types-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "visitor-keys",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3b9f2f8b1d1cd05dea641a0eb0d26158e357d550d06b2f64688fffbeed5d6dc4aba07e39bf0a2fea48d0f4debd9186526125831c4e7f40861492a90a7462ccb"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/visitor-keys@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/visitor-keys@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "typescript-estree",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a6710eae63b6fdcbaf7894a75107c1447a5ec96d4ff8d224803e89aefbe4a32cc9ed07ed8b79acb62ceea2f159c9939f0cb44f7f9d0485207ea3a72456c98cc"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/typescript-estree@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/typescript-estree@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "11.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e121768ecf2d6c6fc232a1c6abb964a7d538e69c156cf00ca1732f37ae6c4d27cab6b96282023dc29c963e2a91925c2b9e00f7348b4e6456f54ab4fd6df52de"
        }
      ],
      "purl": "pkg:npm/globby@11.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@11.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c6cb1a0e4d853208ceacb547ba1098277781287b0008ef331d7ea3be9068e79599810f3fdc479a5ff2bfdc4785aaeb4b0bfe9d0891c8d41043f04b7185ac8cb"
        }
      ],
      "purl": "pkg:npm/array-union@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dir-glob",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a4ad6a7d191e0a5df28663338b993b86562d545857f0b37efb9fd71ce79fed6fa0eeab217aa5c43901b88712c85a0e963dbfaa1a4abd9708389d1a633077320"
        }
      ],
      "purl": "pkg:npm/dir-glob@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dir-glob@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "3.21.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98728ade25172fedd417ac4be64d0f12129150128f042bfff919043a98d15b1c71dbb28a4419a603ad00f6980e52f322f062a144c3c49a30513f3b365bb3b538"
        }
      ],
      "purl": "pkg:npm/tsutils@3.21.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-3.21.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@3.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-3.21.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126"
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "type-utils",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6c490adebbe5677dba90a56e6f9c225dab5677434537d6a89699186bf7c38d426729ff28623c914fabc31788954b8a4b2638a4a3225759ce479bcc7b821b37b"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/type-utils@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/type-utils@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "utils",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fca318de6f96886cf144b6643141838b2348bd9f9c9204463f6441c766a2904859f18a8d6bbfa76d85ab1c73d74bbb0acbd110b998f0b107bbe701518061601"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/utils@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/utils@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "semver",
      "version": "7.5.8",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23c114872ae07cbadc4e4cd5dd34ac1b2975b52b8fac40f3af4c9de66f74520371424c835d42e4ddbe8c950a930a966936d59ed4ad21cdc9676644dc2c17b651"
        }
      ],
      "purl": "pkg:npm/%40types/semver@7.5.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/semver/-/semver-7.5.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/semver@7.5.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/semver/-/semver-7.5.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-compare-lite",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e3f874c348924a6999df8aec3e89a17db2474fa53a361ad125cb92479d657f85fbf6423ffd44ab0621242d2e1da8c779791001b0e3cee19c179ed2c209eafda"
        }
      ],
      "purl": "pkg:npm/natural-compare-lite@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-compare-lite/-/natural-compare-lite-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare-lite@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-compare-lite/-/natural-compare-lite-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "confusing-browser-globals",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26c3ca76687c6649a71f10e4e79159d53a952ef1104efa01c8965137d8f3234523c4afd08009aca61cfb3c6b6a80f89e419fc241c1d65c247b0130cd8467be60"
        }
      ],
      "purl": "pkg:npm/confusing-browser-globals@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/confusing-browser-globals/-/confusing-browser-globals-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/confusing-browser-globals@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/confusing-browser-globals/-/confusing-browser-globals-1.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-flowtype",
      "version": "8.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "757f25eaa50be8ef9f60fb6935189d782152a6658e515c7941c6862d5a9efef94388149ee2f6258c3583113c27c85ce997b072fd6548bbaadcae7882807f41a9"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-flowtype@8.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-flowtype/-/eslint-plugin-flowtype-8.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-flowtype@8.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-flowtype/-/eslint-plugin-flowtype-8.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-natural-compare",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f7b0fc329cbd67c0a8b7589e8022c0a5c0131ad334e2e787e7da82d4ea775f4d220ed39c5ace78d27f5e4f701654e853566e637943a7314f8579846bc1e2d6b"
        }
      ],
      "purl": "pkg:npm/string-natural-compare@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-natural-compare/-/string-natural-compare-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-natural-compare@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-natural-compare/-/string-natural-compare-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-import",
      "version": "2.31.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b19a423ad916dcdbfc3c55fc728758d04537514c5e76571c1154797fca43c09aa1be35beff90d9fe6f22cfd0bc4f808ef3580d7a26df364b26c922798c89adc"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.31.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.31.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-import@2.31.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.31.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rtsao",
      "name": "scc",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cede8e76a683a0e9c9d5962c0981adf58996cc35e5e2f41d293c897afeb680585118a771ee6713e7857d2888e0f9ddb08bd117b0fbc03ca7bb8bb5a37d5581f2"
        }
      ],
      "purl": "pkg:npm/%40rtsao/scc@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rtsao/scc/-/scc-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rtsao/scc@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rtsao/scc/-/scc-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-includes",
      "version": "3.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ad696adb61baa91979068593c652e9709e155fe47a72d7188216c1aac881a095b071986e6f4a3c507a7dff5863a33e9344bf546d04b2b16e65579bc1e9252b5"
        }
      ],
      "purl": "pkg:npm/array-includes@3.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-includes@3.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.findlastindex",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdf113bd1140f28ec488d9fef8de5ffe4682c36db586ba46b0399ca67755ba990fcc47355ae7f75600b4a9bcb505b1ecedfe435588e0b445362cb8796ea7867d"
        }
      ],
      "purl": "pkg:npm/array.prototype.findlastindex@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.findlastindex/-/array.prototype.findlastindex-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.findlastindex@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.findlastindex/-/array.prototype.findlastindex-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-shim-unscopables",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77d4fcb9cb04861f018b5c285c27fe4c828321138b1b958293183c81e0426ef936da4cf00b91b63a75d530ee8552cbd09605145d0da2b5ea615832ea0f36de0b"
        }
      ],
      "purl": "pkg:npm/es-shim-unscopables@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-shim-unscopables@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.flat",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af01bf8dad677b22ea0ae199e5862bce703ad83e266578348b5708b242142928aa1770a37bdff05c096cf41f6cd566b67e898cb08bfc73307c8d970f9b109716"
        }
      ],
      "purl": "pkg:npm/array.prototype.flat@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.flat@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.flatmap",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63b5ade7578a252ca2f34845ac909e3c618da3992d242b2516e6e8a89b1b7f9ec208f726e73ced96e3e5738fda0fcb16b0abe5c1ab5ece957853579f93c9298e"
        }
      ],
      "purl": "pkg:npm/array.prototype.flatmap@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.flatmap/-/array.prototype.flatmap-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.flatmap@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.flatmap/-/array.prototype.flatmap-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0858f3618022e1385f890be2ceb1507af4d35c7b670aa59f7bbc75021804b1c4f3e996cb6dfa0b44b3ee81343206d87a7fc644455512c961c50ffed6bb8b755d"
        }
      ],
      "purl": "pkg:npm/debug@3.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df999292ee195cad2f7c2b87103030b79e5d8368cd6a31d9d6876f17ef124abf3612c658e109977ee5aca3ca0477ccd185539b48dd7c68cd028d2768057ef323"
        }
      ],
      "purl": "pkg:npm/doctrine@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-import-resolver-node",
      "version": "0.3.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5858f68accf6d896a152ff81efcf1394edcdeb32f79cd24653c09c65b3d9bd512404f689742578bf2e70ca086dcb944e15b0919e6d77daff0149cbb9ff5050f2"
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.3.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-node@0.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-module-utils",
      "version": "2.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c002d9d07168cad97287fd7ee30b99f452420ff95e587433cebc49f3eade6f245e48b93b2c0a4cc9ddd625a2d5a0df83e7e588749c832b573a26713ae55e19ca"
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-module-utils@2.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.fromentries",
      "version": "2.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93a136d45cf24ac48ae5adb529100305dfcd1a77917a014ee692c77dd40ba510c44d4349b9e2d7b37582cf2437b454436206eadca1c65df4db8b66ecf1643aad"
        }
      ],
      "purl": "pkg:npm/object.fromentries@2.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.fromentries/-/object.fromentries-2.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.fromentries@2.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.fromentries/-/object.fromentries-2.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.groupby",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8b872dd3413bb35c8e617af87cb011aa6e6bab1db6c88c08b46784bade7b6154b98bc5f6e3e13e786b809f66b5c8aedf623f899500f60ca3fbfdf6d6a3df08d"
        }
      ],
      "purl": "pkg:npm/object.groupby@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.groupby/-/object.groupby-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.groupby@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.groupby/-/object.groupby-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsconfig-paths",
      "version": "3.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d80736460cc37bf727e3c1af39edccfa8f36a4415ec03dd43dbca85071dd29ab07c092a376ce1f2d759ffd4c799004c128ddb4a1a146bbe8db125a75a68b349a"
        }
      ],
      "purl": "pkg:npm/tsconfig-paths@3.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsconfig-paths@3.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json5",
      "version": "0.0.29",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7512e30961d8838a1a03bedcc4eeb8a0efbb2700b09c8ce464f76bac2ef58d0990b6584ce79ea9c0aa396d4ceabd99dd9156de14b2088bef530b8d09345e6135"
        }
      ],
      "purl": "pkg:npm/%40types/json5@0.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json5@0.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/json5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83531630b062cfc14a8b57b8c3453254bdf0fa225c7960050406819e718a3a935ae5ff132e4b646eb7b5facea8202c9d5809be1d15064e623efffc6fda1bd760"
        }
      ],
      "purl": "pkg:npm/json5@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/tsconfig-paths/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdabc03115ce80154d17a9f210498bdc304ad7d891a437282305beb3043e09b1a2bbb963bbab7e264940d4c1f07a85ad69d82de0849552c5cbc83ab7e1d75cc0"
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-jest",
      "version": "25.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d62d411779e17b0bd4062aabdd49bccb3a22d3c7e6e7a3bfc70bd79e7de3df11bdb9ed014783bc9eddd87cd0065591a6bf450b0107543f39142f8365fb17435"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-jest@25.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-25.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-jest@25.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-jest/-/eslint-plugin-jest-25.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@typescript-eslint",
      "name": "experimental-utils",
      "version": "5.62.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4535e9781dde324a687251b76477edeaf1bf677d1accd1eea98eb028f04795531916e12faed9440def2032a0dbf923bef618c2fe92de91e482af27fdbcc6650b"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/experimental-utils@5.62.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/experimental-utils/-/experimental-utils-5.62.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/experimental-utils@5.62.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/experimental-utils/-/experimental-utils-5.62.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-jsx-a11y",
      "version": "6.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1c0779f3e16986ef9a55f3edde45440e1d994d49484536adfbc67a6046408210b5375ccbd70312e4d5ea965b2136d8a8b8434d459ecc3d040ddc2470cf827d9"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-jsx-a11y@6.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-jsx-a11y/-/eslint-plugin-jsx-a11y-6.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-jsx-a11y@6.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-jsx-a11y/-/eslint-plugin-jsx-a11y-6.10.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aria-query",
      "version": "5.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08e44ea676a86a9d44d85d34d12eb6afa03ad2e1d99e696fa2685fc93d8395372b6353ab04a9f65211fbaa7e704c2f7332f0f4018edcb1d3d237028ffbb5a243"
        }
      ],
      "purl": "pkg:npm/aria-query@5.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aria-query@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-types-flow",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "387ff6139160db487668fadb7be40bf09650164a34619685fa3e269d0ec11a17dabceecea522daf1ad32f6c070a261dd49b9214d2f1340d6b205f9d6e43c1bbd"
        }
      ],
      "purl": "pkg:npm/ast-types-flow@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ast-types-flow/-/ast-types-flow-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-types-flow@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ast-types-flow/-/ast-types-flow-0.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "axe-core",
      "version": "4.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e6edba515e70d25f6604d9815f064d859c5d1ea7ab661bbc4f87c88779ef0c21cae0abbeb636471ef39e9d62d2582e4b88a1866f19f4ecfcf6d986275e4dc12"
        }
      ],
      "purl": "pkg:npm/axe-core@4.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/axe-core/-/axe-core-4.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/axe-core@4.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/axe-core/-/axe-core-4.10.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "axobject-query",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a888f41bdc196cc18d2e32e68353d3eafda613d007db3967003243ff6b42e84d348609a150e7c407a82b7873c07cb452b9f1ea44e2144e4c3a13e337947d0f4d"
        }
      ],
      "purl": "pkg:npm/axobject-query@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/axobject-query@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "damerau-levenshtein",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1d412141efe9657d47101d440edfe07c111463d0e6b8c3d3ce58c23fa6e1adb9fee0172c069a468b084967b9d7d388a655f8dbc7a8bd227f376b23c468ec448"
        }
      ],
      "purl": "pkg:npm/damerau-levenshtein@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/damerau-levenshtein/-/damerau-levenshtein-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/damerau-levenshtein@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/damerau-levenshtein/-/damerau-levenshtein-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsx-ast-utils",
      "version": "3.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "659a30f47048e4ee843e04892d46fc9f634a8265564f00af1c6c05b8994c8ef2c5aa5186ea98e2acf86d76cb1e68b6634a26c3f1e7a0ce6629519c282258f671"
        }
      ],
      "purl": "pkg:npm/jsx-ast-utils@3.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsx-ast-utils@3.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "language-tags",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31b8cde34f1f12775f8905db150d6f9ddfb53682c3b27416e35e35d284015e2c970cc607e73e74e63b966b82941352eac510bb0e03a06436ca2f11c8c26dbb84"
        }
      ],
      "purl": "pkg:npm/language-tags@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/language-tags/-/language-tags-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/language-tags@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/language-tags/-/language-tags-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "language-subtag-registry",
      "version": "0.3.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0aeb92de6bcf35a47a2da0611ae600e5331b77a5cb4b8b64699416fb133878ad174b10eb608bb9f81302bd95a9a750290a06a69e29155e6d3aba040c529295d"
        }
      ],
      "purl": "pkg:npm/language-subtag-registry@0.3.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/language-subtag-registry/-/language-subtag-registry-0.3.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/language-subtag-registry@0.3.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/language-subtag-registry/-/language-subtag-registry-0.3.23.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.includes",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3bf9cf5b5bace901d2474edba379e3ce0c0864ba271d02bc85b1f54ac00fb01b0f3dc09e064d8e3ce164ee70cf612ed0c43a93af23e6879f3aa70b9947a7846"
        }
      ],
      "purl": "pkg:npm/string.prototype.includes@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.includes/-/string.prototype.includes-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.includes@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.includes/-/string.prototype.includes-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-react",
      "version": "7.37.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0463f48d199f632bcecaf328457feea14796f86a8d8fdcb5e9b3d0cea0077f7018208fed0ecfa330dd1d055925f3cfce670346c2b545c44eeb887b1755fcbf2d"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react@7.37.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.37.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-react@7.37.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.37.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.findlast",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "095bdde851e0d59dcf3a904bc4ee84eb3afead228443d2faad91c0698ee52df84ab166140413ae32cd1ef68db8a28a63e87fa0791097d1827e4c92c12b6787c9"
        }
      ],
      "purl": "pkg:npm/array.prototype.findlast@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.findlast/-/array.prototype.findlast-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.findlast@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.findlast/-/array.prototype.findlast-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.tosorted",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7a171f01edbed984bfe0994b00cb40f5e5686f0dc730de69c635b6698b7a66789771b56b23da311a23863aa28dd78877f3b9280fc0a734e0c62de8a82f0bfc0"
        }
      ],
      "purl": "pkg:npm/array.prototype.tosorted@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.tosorted/-/array.prototype.tosorted-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.tosorted@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.tosorted/-/array.prototype.tosorted-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-iterator-helpers",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b839fe144d72ac3cf20b4a42a3deb50762076dd33ccbf00266c283e1d1ba5aaae3579dc10038f06bb0fed5aa26dabb0d55f2f20e053f7a282f949189d3c390e3"
        }
      ],
      "purl": "pkg:npm/es-iterator-helpers@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-iterator-helpers/-/es-iterator-helpers-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-iterator-helpers@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-iterator-helpers/-/es-iterator-helpers-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iterator.prototype",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f476442809addbd9511e29004ec45a61f8901b72b41d13b282d1492ac292e6bf6102e0fe354173feaeaa3dc18a1d002886e7f58ce6cf680c0a5353cbadc23f6"
        }
      ],
      "purl": "pkg:npm/iterator.prototype@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iterator.prototype/-/iterator.prototype-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iterator.prototype@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iterator.prototype/-/iterator.prototype-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.entries",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "726a29c62f15c11200c3f7e48a32688527e979fe4f74dd2931024de950bf64abe7d0b2249d60fc2ad818e8a950744738b488dc4371f148c9a7bedcc8b1c75a61"
        }
      ],
      "purl": "pkg:npm/object.entries@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.entries/-/object.entries-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.entries@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.entries/-/object.entries-1.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "2.0.0-next.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53b5a31951bdb07f2dbe35b94a619b42eba2ef9162ca3017ef61d7d790f0041c05f5d362419450020f679cf858cbe4d49c4d3e55caedb6ebcd23ca12c5972870"
        }
      ],
      "purl": "pkg:npm/resolve@2.0.0-next.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-2.0.0-next.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@2.0.0-next.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-2.0.0-next.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/eslint-plugin-react/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.matchall",
      "version": "4.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e820bdbb204bfbfe3c7588b345fec7ed501808c08d4c178cefcc7f55351ef5b1446b105ea4f2436b53b0f7d2ea23fd7217b92ecbb437710b1832b72319472c90"
        }
      ],
      "purl": "pkg:npm/string.prototype.matchall@4.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.matchall/-/string.prototype.matchall-4.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.matchall@4.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.matchall/-/string.prototype.matchall-4.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.repeat",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2efd395d0db283f1b14243fe1fe7e98d46b5f067c860db0ed947cc1ad7a7bccfd5e978f5a5dde1847140f4397a441ff5491ffd86de08d4b51dd93a205ed92ff"
        }
      ],
      "purl": "pkg:npm/string.prototype.repeat@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.repeat/-/string.prototype.repeat-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.repeat@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.repeat/-/string.prototype.repeat-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-react-hooks",
      "version": "4.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "433962349ab81a29c305c0fc80f079bf4c21ea0f2add2522e84145d31f0dfc12fd3e856cd1ab6e19ce3ba33311c8e58029dc1a6793a76ce11add647e75218ab9"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react-hooks@4.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-4.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-react-hooks@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-4.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-testing-library",
      "version": "5.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5e5fd7b529cd8fa9545e777b5a68b9c002a3d91845fbe42f8cfeb5f3500237c0883f671cd49b53950307defcefaf13ee985ce2deb527bd83918a0f679c5e2a7"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-testing-library@5.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-testing-library/-/eslint-plugin-testing-library-5.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-testing-library@5.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-testing-library/-/eslint-plugin-testing-library-5.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-webpack-plugin",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6afaca7069dca4f6cf4941d7e81decb4d1b390a16da3778bf8328ce3e57232b56784f737bd17335650aadee86e14e751bc31d3557bb3c24d59294aea0d01d0f7"
        }
      ],
      "purl": "pkg:npm/eslint-webpack-plugin@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-webpack-plugin/-/eslint-webpack-plugin-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-webpack-plugin@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-webpack-plugin/-/eslint-webpack-plugin-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-worker",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0aa440db6d1857fea30a8f155af02dd4a2b1e9e7a4d5520730f78b11ba5c7d27e411e5b204da69ca733fa3aabe5a6c3eb0e868b369a5df8c196d25f71b5dfffe"
        }
      ],
      "purl": "pkg:npm/jest-worker@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-worker@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "10.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a115c0a6ae78113463e1e3221731a71d61b2fb3a39adab9d8eec4dd1bf07eecfd1536a16d16becc7d3b400244dfe446af44f15bbf45eb24181e68de38be1731d"
        }
      ],
      "purl": "pkg:npm/fs-extra@10.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5d8277563ab8984a6e5c9d86893616a52cd0ca3aa170c8307faebd44f59b067221af28fb3c476c5818269cb9fdf3e8ad58283cf5f367ddf9f637727de932a5d"
        }
      ],
      "purl": "pkg:npm/jsonfile@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "829b4735082120d9dcfef4c6224d12385185357c3b255ae5454b42a2725196f6b0e83b97d303b925e928f6c5ab301861f8fb18019ee85c088e9dffd42a88328b"
        }
      ],
      "purl": "pkg:npm/universalify@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-webpack-plugin",
      "version": "5.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4127f5ca3b5202c99feeb60157b5d7f3abae6b85bfbe4848b74c4d5ca6ec8b67e811e5bbbe3250cf86e19e92f7c47fa5d6bca5d7af34b8dbfdebc67e5fa8d262"
        }
      ],
      "purl": "pkg:npm/html-webpack-plugin@5.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-5.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-webpack-plugin@5.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-5.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "html-minifier-terser",
      "version": "6.1.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a21ffa6f20cf9cbd7378d5c5ac35c52f266392bd4cb011baebb20cefdd9c69fd4bd943ce38c7fae4d1738d41ff96dc9fc230067ecd6bb17d5e7ed2b48c2fca22"
        }
      ],
      "purl": "pkg:npm/%40types/html-minifier-terser@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/html-minifier-terser/-/html-minifier-terser-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/html-minifier-terser@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/html-minifier-terser/-/html-minifier-terser-6.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/html-minifier-terser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-minifier-terser",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "617c529490594cfed14b7b569d0c3be28a0a6ba2fd6fd8bd4185d8db579412f859deef572dfbfa3a716c42ae91c64847ca0b1a50cbd8b19455e6b53f395359c7"
        }
      ],
      "purl": "pkg:npm/html-minifier-terser@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-minifier-terser/-/html-minifier-terser-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-minifier-terser@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-minifier-terser/-/html-minifier-terser-6.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/html-minifier-terser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "html-minifier-terser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83119606b4d3d49b8cc7a47ea393d35cc9949e19d5ccb43d48dbad0f862a2ad23a6a9f3deedded28409895aea0096124a655e794dc9b124660f46106c4a14283"
        }
      ],
      "purl": "pkg:npm/camel-case@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascal-case",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b969464f76129caf71dc140968e75c670ae757a84fa5df23147d7fb9ca622d13e1ff6cc2549292d7d1381af607bda09c0029f77e85d9d1c2c1f56af1d4a19ee6"
        }
      ],
      "purl": "pkg:npm/pascal-case@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascal-case/-/pascal-case-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascal-case@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascal-case/-/pascal-case-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "no-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e000dde318087e468c541991d348e2c922a51cdb09a8070191e2d6e93402a69a8bc5a16ab439d4646f456495d45e3b66b68814ff384ba51bd5d251cd74af7ce"
        }
      ],
      "purl": "pkg:npm/no-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/no-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edf9b797734017d59f37a5b724e99fe5daf0a55a97efc26da0627703a5b46ba66795d338d70d9f5790f8f74a6c2854e931db3c4c9b1efde1cb145b0d1c78c782"
        }
      ],
      "purl": "pkg:npm/lower-case@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0916ef781d06fe29576e49440bef09e99aa9df98bb0e03f9c087a6fa107d30084a0ad3f98f79753a737c0a0d5f373243ae1cf447b525ca294f7d2016b34bfdb"
        }
      ],
      "purl": "pkg:npm/tslib@2.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "5.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f927e9076956ffc0a485732c95ef9b829fc7e2638b15dfc5c9a1ee02532190fa6394fdf315614747d61242f82250e6e6371275b6ed26c9612e17f0188bac016"
        }
      ],
      "purl": "pkg:npm/clean-css@5.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-5.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@5.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-5.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "8.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a44cbf6e99ff877b60d9914abc7fc27da1fef22fa449288db875521306635f6419ab8bdcd8650aca92e5e22a1c9f3d2bbcb5486754107588a5debef9e54785b"
        }
      ],
      "purl": "pkg:npm/commander@8.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "457963ef3098a2445ea96a4e3c7f68622bd4ccb619e6f00f21f1260933558a8b02efc17c1741fdcbb4fb806d8cdfdca682eb7117981c144b326504a987d069dc"
        }
      ],
      "purl": "pkg:npm/param-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afe672a587ac91addac6bf1789d9ee72d9e454a64528b085b8036012dfccf04b3dbbceeeee7c3c103e2e4986cdd702518d7ad9776e69c6850b0cb642899e3df"
        }
      ],
      "purl": "pkg:npm/dot-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "relateurl",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b4f03c6f9b888337730b33412c3fad840d5f48ba15cf47a6e5373e94b5ca7bcf2577b6be0754d20db7a32969159bc683874f743b60dd8ffa36875fcbd46e0a2"
        }
      ],
      "purl": "pkg:npm/relateurl@0.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/relateurl/-/relateurl-0.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/relateurl@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/relateurl/-/relateurl-0.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-error",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02827960c01c5ca6312a1b8919d72fb1ef95a1ceafd51827b11de759c614eeae2deb3d10e93f3ab2fe59abc54845b396585a6f74613cdcbb5d48c35dfba634c7"
        }
      ],
      "purl": "pkg:npm/pretty-error@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-error/-/pretty-error-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-error@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-error/-/pretty-error-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "renderkid",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abfed521003c966335845fa39feb0548f58694c91201e35870f2e60d0c76cf3ba20df68bace9ae991f226942a57a71608745d13c851e48f947dc0f805b7679a6"
        }
      ],
      "purl": "pkg:npm/renderkid@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/renderkid/-/renderkid-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/renderkid@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/renderkid/-/renderkid-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-converter",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81ddf2a483df38cafd8798c82aaf04dec1ce4c28de8ab9e5d162b965d4b5016d0e76dd1bd4f696687749e10938925bfe601f5a2414bb9844978c5a0340fbba0c"
        }
      ],
      "purl": "pkg:npm/dom-converter@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-converter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utila",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6740db8042d2f7f2ffef9c196eba3cc409d3e74a41545419fa1504b9e18353914de7561209833e8ddc6c7c28878f034fff82c20c3d22fe0ada2a97819ce5ca44"
        }
      ],
      "purl": "pkg:npm/utila@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utila@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "832c8f93aae0a272c51031a879181035a114bdd27892d4e699487f876b7bb3e33ca0fa483f180d00259afba112479ee45ecb70a8f882badd15f0d469730814ec"
        }
      ],
      "purl": "pkg:npm/htmlparser2@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "identity-obj-proxy",
      "version": "3.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/identity-obj-proxy@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/identity-obj-proxy@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "harmony-reflect",
      "version": "1.6.2",
      "scope": "optional",
      "licenses": [
        {
          "expression": "Apache-2.0 OR MPL-1.1"
        }
      ],
      "purl": "pkg:npm/harmony-reflect@1.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/harmony-reflect@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "627d26003641f3dcd3b6390f2445f0ada7372c7b9d910311f8f6aa6bcbb1247081afd6a0c73b5489f582ca262b8e130f068515063ca7cb423b5c7ea8cc3afb41"
        }
      ],
      "purl": "pkg:npm/jest@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest/-/jest-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest/-/jest-27.5.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/jest"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jest"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jest",
      "name": "core",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aebf513aef403d02776e0d4aa98803aacab2ed2d288c5f88276e719beac58766322b0e600b1d22db294fe7d00d060044f7fc5e08c01598b4a205b66a01f99d"
        }
      ],
      "purl": "pkg:npm/%40jest/core@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/core/-/core-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/core@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/core/-/core-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "console",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "919fed3694b73579f49a55d75cf36e0d99dbe1cd28676d2be0ae5e7a6336937d190b71b44f4da75d4bf285fe5875b5d61cf1092dcf6a18bc44676d7a31d2fe66"
        }
      ],
      "purl": "pkg:npm/%40jest/console@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/console/-/console-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/console@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/console/-/console-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-message-util",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "accc857b5fa39f20007fe347c137250f3d1e01a2e454374a5471c1156b015879e787961e24c3565acbfb01b1585df2b7a13aaf2fb5535a484d2eed635f6e03fa"
        }
      ],
      "purl": "pkg:npm/jest-message-util@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-message-util@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "stack-utils",
      "version": "2.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5a11b619dd36d83339cf75c76bdd2988acb5f00bf00a65741e09ff4f81aa3908a6fc0b21ee117e63cd63d392fade82f85124772944ee81168196f7271a3a463"
        }
      ],
      "purl": "pkg:npm/%40types/stack-utils@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/stack-utils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/stack-utils"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-format",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41bd60cb93ab3f9fb30dfd81be7cdd9778ec4dfd6a5d531acdbbc2a0a86d2aa56ce3f60ae28cd7e2029024957235ef9c6a334f9f42a80b4302dc552668758499"
        }
      ],
      "purl": "pkg:npm/pretty-format@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-format/-/pretty-format-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-format@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-format/-/pretty-format-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b1c29b7649f4f34ed5dc7ce97318479ef0ef9cf8c994806acd8817179ee5b1b852477ba6b91f3eeac21c1ee4e81a498234209be42ea597d40486f9c24e90488"
        }
      ],
      "purl": "pkg:npm/ansi-styles@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-is",
      "version": "17.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c361accae90beb62099e569f7ff9d17a03d047de02fd75da9af3169921d1278cbb4ecff8a1c1919931ef3acf0f484ea90777563ab0ff9ee7ae539b1db81b10e3"
        }
      ],
      "purl": "pkg:npm/react-is@17.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-is@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "stack-utils",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5916bdf226e919ac5ad349c7ebaab4a2d2f1ea856f1520d19ccb5ea63471a132f65ee1aee5fc2298839e3b0b6afa0182a08247bd53a963bc31a5d885e27745"
        }
      ],
      "purl": "pkg:npm/stack-utils@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stack-utils/-/stack-utils-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-utils@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stack-utils/-/stack-utils-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "reporters",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70f5e1f6158895524c424564f38688bd7b81078b9042616a66269c96816e1a23f76a1d6c6c2c42a2c89d5c50dfa86f3ee9f3b5a11d9d4c94e5b0ecb85459947f"
        }
      ],
      "purl": "pkg:npm/%40jest/reporters@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/reporters/-/reporters-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/reporters@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/reporters/-/reporters-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bcoe",
      "name": "v8-coverage",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d21610f120780dbe73bd90786b174c1c6c046908e467316342237d2d562f2050769d25075bdb58a715ab88fad60c0488c626976b1f3744470bc6e49d9c63d9b7"
        }
      ],
      "purl": "pkg:npm/%40bcoe/v8-coverage@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bcoe/v8-coverage@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "test-result",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "116df9976458154714431149cf90afe4c4cec6524842ce08ee0c738b6cd553b3c984ec1f62ad4c742e678529988d7d6098c98b3ef077b08682f8191c1d105f6a"
        }
      ],
      "purl": "pkg:npm/%40jest/test-result@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/test-result/-/test-result-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/test-result@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/test-result/-/test-result-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collect-v8-coverage",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "947978779fce3446cb949bda24db6c17f2f3f96bc1d3bbb6c9ca9361b76babb532a435da8a5112e2f6a561bd9e5a2245c599559a919e91faa8c50873c85753e1"
        }
      ],
      "purl": "pkg:npm/collect-v8-coverage@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collect-v8-coverage/-/collect-v8-coverage-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collect-v8-coverage@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collect-v8-coverage/-/collect-v8-coverage-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exit",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "664fde34a576cdb8e92b3aec43e9f51baa6855b12b4312742c13895da299d445622f31fe86b2eef5c757238cf0f5d05026c970044a5b4363f5a12ee70f1b3a8d"
        }
      ],
      "purl": "pkg:npm/exit@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exit@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1827c4d66b6c1c63842c253c7bf67b616ce99b26ebc7ff9d4937cbaef63ca9199a63acd74ca5a7e964088da005c34ebd89c9ba19530d920bb437323888f65437"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8577544d960854eb75131fff8c0422fb04d9669529c018ffd10b0ecea7a06f7ac630c78989212ee712c79d87c1ad1578447dbe38248e3bde48b3fef1d562786f"
        }
      ],
      "purl": "pkg:npm/make-dir@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f7b3c13091d1482421b704f28162fb248171a8cbcf00473bde8248ad93ad0dc5177096d2ce4da1fb09488c457bf0628ae5d10ef5da212371607e7cafccad657"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "3.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05ec265172267ae464d986343d56f180a032b2f8513d4404d21e5044cfbe9d55b2b9b28657497ca90e68a7cf81d833a6c127badc98af8f406390f4157fc7cfe6"
        }
      ],
      "purl": "pkg:npm/istanbul-reports@3.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@3.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "html-escaper",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e"
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-escaper@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-resolve",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1450f2f3ff44e8257cdc831b0e97233a1ba60103c3c844e7536299d4ef7c0f04e7cfc00e06c5bf5efdc6c92af598e65d22d2d1fb30d9ec8fd475315b8123950b"
        }
      ],
      "purl": "pkg:npm/jest-resolve@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-pnp-resolver",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb7369c10127468201b71e1fca16e54033e0248d07d48108917ed284b5233c603b4ed513bc8d6888a8b7491e28051d21421411f349785807b946b5c1c16300f3"
        }
      ],
      "purl": "pkg:npm/jest-pnp-resolver@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-pnp-resolver@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-validate",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6190d962d0b61398e235b43077148d52d514e9fc1ab277da536ab2702fcece20116ea846f9029bf911a02912e75883883ce9edc24fa90cd11a30921b449c205"
        }
      ],
      "purl": "pkg:npm/jest-validate@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-validate/-/jest-validate-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-validate@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-validate/-/jest-validate-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-get-type",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8a63de64b1849a2bb0cc056427e9d433de4a807f7041eb8cb6b9d786fa1bf829f48e6fdab071842cb5325cd4a09bb22c7ec0b65665837cb7b9f05f718e04b47"
        }
      ],
      "purl": "pkg:npm/jest-get-type@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-get-type/-/jest-get-type-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-get-type@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-get-type/-/jest-get-type-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "leven",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aac75af87f234da51a37fc79bf35b6af373ef11c384c043fe0a8c1e3a2302b9547f8895579e7a37bf128651a625ef22a8c580af3841f7ea3f3b462375412c6d4"
        }
      ],
      "purl": "pkg:npm/leven@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/leven@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve.exports",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcdb691cd0cdee35a101a43d06f054619e984d7b110607ea58558fec16416a83093bf2371b9385cef4ee58d9590b768f8e29ecd45f9336b2cab066c7e2b7ec45"
        }
      ],
      "purl": "pkg:npm/resolve.exports@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve.exports/-/resolve.exports-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve.exports@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve.exports/-/resolve.exports-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-length",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa5eab34de5f607361659cb8d515ec629b428c0d88826ab8106ee4640605408d44d554d76abafa64f5c183a7aaed8e9e2b8144858e80265cae1486ffbff4b455"
        }
      ],
      "purl": "pkg:npm/string-length@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-length/-/string-length-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-length@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-length/-/string-length-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "char-regex",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "916597cedbd9e5205057e79180a15e87cab9b0bb99636fbc5942339715954e0fa81b0635e2aca5c7529b2b31ddf0fe99624020d31c880d4f4930787224c6758f"
        }
      ],
      "purl": "pkg:npm/char-regex@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/char-regex/-/char-regex-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/char-regex@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/char-regex/-/char-regex-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terminal-link",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba7d059a245440daf93c9ab2f643fb738d05e4139fa469584ebc689c30a111907ba7367144da7f6edfb29a2cbdfe7a705f26bd287f7d9c9fc65c522252460615"
        }
      ],
      "purl": "pkg:npm/terminal-link@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terminal-link/-/terminal-link-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terminal-link@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terminal-link/-/terminal-link-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80a5e3e402eb29640bb181bd8e54d1991ff12a5bb11d5f99f501303488027ccd7fbb03cc0aecd55678799b04ddf8eb8165cc1220c6eab2c356466d65139d5069"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@4.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-hyperlinks",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "469b00665a56703c0e3d0036d9a087e09d2decbf09980bec0b17ce484c26edc42cdcbb21377e9069393077bd039c13970d61acb30d9e52873c09a4564f45ee9c"
        }
      ],
      "purl": "pkg:npm/supports-hyperlinks@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-hyperlinks@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-to-istanbul",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "146b4ab6fdf122947a05886f807f0c23fcbbf284fb77c02edf0c38408c729ab0ad6448796fc802c36b22cb013ea6e8449ae58a0ed99faef179525076f7cbaddf"
        }
      ],
      "purl": "pkg:npm/v8-to-istanbul@8.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-8.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-to-istanbul@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-8.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "emittery",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b837ef52356b7c62498729b1fe4cfaa6b96d7a7c35bbb5ab0a0d686bde33618f31c55a4b2d4bb4e392c04f47610d97571b9f3f1293cbff9900d7cd1f43faae76"
        }
      ],
      "purl": "pkg:npm/emittery@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emittery/-/emittery-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emittery@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emittery/-/emittery-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-changed-files",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee04b3220727d6182a0cb0b2f3194512a409880069db476289a0c375d3388b84e2ef3f87b44a5ca91e701e97c8aa4174eb71b99f118f6c4aa69ee6c814b13bf"
        }
      ],
      "purl": "pkg:npm/jest-changed-files@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-changed-files@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "throat",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58a7b1328263def12e2b4c8511aa63f32eb857403ac5cb8fb8af46b7577447e77309225cd251ea432b406d207870300ad1d5a1e13d04d844e4a0b136599e3539"
        }
      ],
      "purl": "pkg:npm/throat@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/throat/-/throat-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/throat@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/throat/-/throat-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-config",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6c02c8e6ead19db156d6f5a85c0a13c01429382259105249c7e40bca8ee2d34a570eff00992b215d9fb460d04902f8e1a058e0c4cb6843a560753e0cc7d0934"
        }
      ],
      "purl": "pkg:npm/jest-config@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-config/-/jest-config-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-config@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-config/-/jest-config-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jest",
      "name": "test-sequencer",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c285e245ed6076fbd26e092ed507f126188750ba1b6a8d1348f40e3789d1efdc4e0a96d093b0fb0bc6f75ab9b147498c18fdf3633168e5eaf35184388deefa5"
        }
      ],
      "purl": "pkg:npm/%40jest/test-sequencer@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/test-sequencer@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-runtime",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3b831c3719ff87d881adf1fbf4462c84d7eafcdc524146bba803e157ae51f0eb113206c53cba003a20f7d3755c80d30f070a5a5b2be0c62711f9f54acd331f0"
        }
      ],
      "purl": "pkg:npm/jest-runtime@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-runtime@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jest",
      "name": "environment",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd642384f25edff8216a897fe01ab8f3424a5d5fd17f0f2741d37b7f8d5f33c5431cb731297a2ee90c97021dc416bf7f6d51b7c7be33d4d58390ff3b12263c80"
        }
      ],
      "purl": "pkg:npm/%40jest/environment@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/environment/-/environment-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/environment@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/environment/-/environment-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "fake-timers",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fda3e8c28a25c1ad3b93bfe83376804a778d78118298642c737ba0378bbab380bfface4ceb8305a3ff9d8d3762c1c6d09517c51251ae0d75b36968fa42028e6d"
        }
      ],
      "purl": "pkg:npm/%40jest/fake-timers@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/fake-timers@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "fake-timers",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3803c9500b6078836187f4c0954203e104ece773639bbc7375d695944b3f497c20b620f5b56db6cc007f5b5c1da9fae99a292069643d170e96b3e86c8919b956"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/fake-timers@8.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-8.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/fake-timers@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-8.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "commons",
      "version": "1.8.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b2f9790092a3d94a6dcd2c17949e0efb101425ddc99e2612136861dd607f248d507e6ae9f74b85c146d8b6cedd7b9adb7498850388dc587a8266e9dad5bc125"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/commons@1.8.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/commons/-/commons-1.8.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/commons@1.8.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/commons/-/commons-1.8.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1faff9881f57653bec7b4e570ccbe6c80ea28fb30ffbd2d5727875bbf3b828423866a9a65ed74bb02ee8ee6caf6af4b83a162868d4a50a0d8cf467b93b839fe"
        }
      ],
      "purl": "pkg:npm/type-detect@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-mock",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b88ca6d8d5de043616eb1b6cee3d669006f0e5cbe899db2016f93d5f01337bf21734b089f09fbc1907c5ed94d9ef1ee83944cc15f3ded79b82ea98f3387b63a"
        }
      ],
      "purl": "pkg:npm/jest-mock@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-mock/-/jest-mock-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-mock@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-mock/-/jest-mock-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jest",
      "name": "globals",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64424d078d4e0504201b383222702fd1451f0c38f7ba9987c9d8e2792c45bd346e64496bc7bb5783fb95439858544c225ecdfe68cb0078473d5fbc6248a0a6e1"
        }
      ],
      "purl": "pkg:npm/%40jest/globals@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/globals/-/globals-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/globals@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/globals/-/globals-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expect",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "135ab9852506d80998430409d38d67be0a643831d0bc1f912a507821876bbbab89b321534726403f8eb733ed6520da2bc1ba809948208baf96c240fc9424bf0f"
        }
      ],
      "purl": "pkg:npm/expect@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expect/-/expect-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expect@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expect/-/expect-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-matcher-utils",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf6b93c7f4fa2c1682a0d58d156c0284b04a6314cc7060518c0b7ed926cff76f7f15f95bf5a6b92c699aeb9e11cfccfd1cbc6cad4698cf113d4ff10520bfcf03"
        }
      ],
      "purl": "pkg:npm/jest-matcher-utils@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-matcher-utils@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-diff",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b436f917e792c3b7d4f899cb531209d99377e6120dcd458badbcc3d633fd223e79058f6c08785e393b5ef5f1c3123853b5bc8364aa6c6a0fcbc4dfbb9311bab"
        }
      ],
      "purl": "pkg:npm/jest-diff@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-diff/-/jest-diff-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-diff@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-diff/-/jest-diff-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "diff-sequences",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93580201702c3602f010bf98f16be5f8cea81058f96e06b37d950ba52e429dea0f3d745a0825bb766faadb52b2d95104e57f957910c1560d4f72fbecaf84ed35"
        }
      ],
      "purl": "pkg:npm/diff-sequences@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff-sequences/-/diff-sequences-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff-sequences@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff-sequences/-/diff-sequences-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "source-map",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbd3481d4605dcf25194793df0d742fcdd6097cf012f4f1a41082ee24e19a294240b0f6df5c57c9ad9774d5f1bfd8081f176954c5ae6513009be3b27b438ab7a"
        }
      ],
      "purl": "pkg:npm/%40jest/source-map@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/source-map/-/source-map-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/source-map@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/source-map/-/source-map-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cjs-module-lexer",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f73f1365a18cd697ecc18797ad4a733eb931f149d661d849725b2260c9bac7fc39fa737ef137ff2e70207cb1900a6e7da803b153c5b01c4ab6bcdc05ea2e23f9"
        }
      ],
      "purl": "pkg:npm/cjs-module-lexer@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cjs-module-lexer@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-snapshot",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c98ca45c8e5ad08df5c57ebb9a078bc350d9d1b241fa0a6ae48a52b82028c838b4f8186053f448acbf914f30e690d4dc86f0c558a3fc969fb0ff8d99deeb39b0"
        }
      ],
      "purl": "pkg:npm/jest-snapshot@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-snapshot@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "prettier",
      "version": "2.7.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fbaf243fdcb3b382cca7b54d87c81dccc48f6452f8e0c2c6aa21d6bedb5825efbaaa7b95af8124f70481428bdea98febf8bc2309c536f643559227708a6fa460"
        }
      ],
      "purl": "pkg:npm/%40types/prettier@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/prettier/-/prettier-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/prettier@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/prettier/-/prettier-2.7.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/prettier"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df1bab16fe6d1208a2df7662f09b69e79c042082d1f5e877e05016d343d97fe2674ac4e657f8a87b04a0425f7b247be08e8446c0f4a1b169be21daf1077e5dd3"
        }
      ],
      "purl": "pkg:npm/strip-bom@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-circus",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fde51ef1e54b65300e62058b0e1c515b303fc6540e11fca76ad797fbc585947d61c1b68f4d611b0ebe749ab9381d17ea200a9278b7228e5e15227f14bae6077"
        }
      ],
      "purl": "pkg:npm/jest-circus@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-circus/-/jest-circus-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-circus@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-circus/-/jest-circus-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "co",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4156f474ce47bc6fae6b18ad9bcc0e365ee396dc7c76a85f537dc372ab4e65c2d25482920c32c38bbfb42db00a8b223c843f6ee369b66315d290c1964e169e71"
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dedent",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43a7ca50faa7007032862520154ec15332e2bf491df2c687f5a97bb67bb943fa248fa767ba9c724e01480635732404dd7c8026f4d02cbd73738da29af9bc55c8"
        }
      ],
      "purl": "pkg:npm/dedent@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dedent/-/dedent-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dedent@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dedent/-/dedent-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-generator-fn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "713201e323d82ff1abc3411a4b3012ce0e9b072f60a82a1fbd637ca244e1018231289642fae7654409866ccd172de9e21094acf2e1201cf1ae1d27b55ec38b49"
        }
      ],
      "purl": "pkg:npm/is-generator-fn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-generator-fn/-/is-generator-fn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-generator-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-generator-fn/-/is-generator-fn-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-each",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d457faa7e15b853fdb5d09c4a2e632d346e435263b394a5f21c99d97cbd9df50355146aeace2cf03c6bc05b24e17644350497026199e695ecb9da808fb953035"
        }
      ],
      "purl": "pkg:npm/jest-each@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-each/-/jest-each-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-each@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-each/-/jest-each-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-jsdom",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c506f9130b51e79e7ae46bf7d46f9e9ab5f0ed27d54c67de099234db8209753c4a70ad8b5404a31ecc1de29cb996a90b1760b70cc0da03430a014c0bc57ec7f"
        }
      ],
      "purl": "pkg:npm/jest-environment-jsdom@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-jsdom@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jsdom",
      "version": "16.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bbd4a67361b55124ad33eb3fc75aeee52c6b97a98f6026c1c86d54fe1526a9a56c9b8b5b3724bb0a270e491cae190619853bb487ce2a919650fc8f9dce2cd257"
        }
      ],
      "purl": "pkg:npm/jsdom@16.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdom/-/jsdom-16.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdom@16.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdom/-/jsdom-16.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abab",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f669f4ac68810dbc764dd81f063a9179ebabd9e56564e68a4088c4ef5a06904fc0e46ceaac4dfbcd02f1e8446536cf33fc70fa2acacfb11d3443596f0bfbf04"
        }
      ],
      "purl": "pkg:npm/abab@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abab/-/abab-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abab@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abab/-/abab-2.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use your platform's native atob() and btoa() methods instead"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-globals",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65097b2ce59a17978faaa717e212eebff6cb5d840d7cd5b0d9cd3fc97fd3b0f44a6a6cc77131909e50a31d3dd3b2690e51510f4b772b0b188f7ddcc4fd3ae586"
        }
      ],
      "purl": "pkg:npm/acorn-globals@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-globals@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "7.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d0ca9d28d7f98d75b4ced4f3ba9079304ab9a0674313fe3082a4d8b06d48c6a11378765061a89b6842e0a710e2b3813570834656882a10cba4b131e6d0561f0"
        }
      ],
      "purl": "pkg:npm/acorn@7.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@7.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/acorn-globals/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38f74217a1ac3083fe033f9a59f000384b76ffe8950ca13ba32ea5274f7c6a87b9f680262bbeaa57a1b0eb449b67c8c7b86db01f4e7c185e292c56d86a662b54"
        }
      ],
      "purl": "pkg:npm/acorn-walk@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssom",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a77a6f53baf5332caa6d393e59b3492202631b65664c8681d74ac8f772f354fae60c92a4cca60cb71c7202f41747f352ea8b6ecef788efeec106add28c14b69b"
        }
      ],
      "purl": "pkg:npm/cssom@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssom/-/cssom-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssom@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssom/-/cssom-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssstyle",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0192faeda6e453322ebdc1ea93b734f5c7b3a4635cc54c54e08a22ff4e711e4e0341e4e45a61987ed204e9cb54e8012df869f89f59434ad3ad8fb14ac9c3fbd4"
        }
      ],
      "purl": "pkg:npm/cssstyle@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssstyle/-/cssstyle-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssstyle@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssstyle/-/cssstyle-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssom",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f4b461db7de81b84f269c698813d4dac0a48a002ab4cf4ed76d657ba6db3a583257e3721b20a655f27a416f5e463cfc0a935f5843980483081916242f0b0862"
        }
      ],
      "purl": "pkg:npm/cssom@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssom/-/cssom-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssom@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssom/-/cssom-0.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "data-urls",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f97964d25cefc1266a5d20a091b8a5204828003743b096254adf23ca6f02165354ddc390516a3c65ccc89dbe1fa0c24a3d01f43dcc88f9da9cc5f75437600bd"
        }
      ],
      "purl": "pkg:npm/data-urls@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/data-urls/-/data-urls-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-urls@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/data-urls/-/data-urls-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-mimetype",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "338c8cc2bea6027433efa4db266f75e3e80fa41fe70b0bd96c9536f1c503e9d474d38480c432ce39251a07524346a2ed68e57fbe2d080b9944006160ae31affe"
        }
      ],
      "purl": "pkg:npm/whatwg-mimetype@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-mimetype@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "8.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "800a23a9bfe6f50f1ae4857de84ddf1c933bd00cc2920b78b97617d8eec49aec8e9cbad5882425b0406617d51022edff69e008a76535eebb5ba5958d9ed42a76"
        }
      ],
      "purl": "pkg:npm/whatwg-url@8.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-8.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@8.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-8.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d79221ee985f71d3f9631aa207e883b4ba1a4f3e0d777e7e22202fd2443914d287cd781d5aa3e84c8a840c32665dc790b7825993a9553d3f259c394fa460e9a7"
        }
      ],
      "purl": "pkg:npm/tr46@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8122f14b1a20692e37f099801a1cf5ec9fe868e716671afc86bec6abcb018d73c57240950c1c9f0e04a186acf111d2890178c0da6a7e263419600513b1b88f3"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decimal.js",
      "version": "10.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2f0daf10c6fafff9df788528793f7209c08e6df3f7342ac329fa0f1b370f5c63689c38d6b968f7ef29e89e5b55a51b4590630c2127b9a3ba2db1b6278f4125f"
        }
      ],
      "purl": "pkg:npm/decimal.js@10.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decimal.js@10.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domexception",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb1276985cbfb226d5425bb9a878ce91ff49dcaeb38260b1809f78bb611dbc3395d3d1fedf62ed46cc04714b2651637bda954b3849d3491688555cd54204b476"
        }
      ],
      "purl": "pkg:npm/domexception@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domexception/-/domexception-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domexception@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domexception/-/domexception-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use your platform's native DOMException instead"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56567028f0a460ac5081e49b1f91329e03a6469ed6c3b23dad02c44444ed7f9a1f77da467acc1688eb6882910ef39d23ce23d16abade1b19f9408893aa96f6c0"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f4711ce6e9d9325585779cfa28a0ff1795c70f42e91e8308409e9a0b717cbe5fe03c29fa463a85f00ebf452d9777c3380b681190044de563ddd99bf8b526f21"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/form-data@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-3.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-encoding-sniffer",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f925b38c04847f4d5664b9b1d3f8ec93dbbd3942fa20516e08067ea71ddef9e8ec2279217d6836058f876fe871c454661b1da2c44dadd6820658596332cb765"
        }
      ],
      "purl": "pkg:npm/html-encoding-sniffer@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-encoding-sniffer@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-encoding",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f99629b9e0938f37d1edcef2bd1c55ef0666bfae77c57aab22734852a63b436d5c51ddd24a2dcf8a07857a1a08863af97b098fca361f2bc52a3d0ca42b9d413"
        }
      ],
      "purl": "pkg:npm/whatwg-encoding@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-encoding@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-agent",
      "version": "4.0.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-agent@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-agent@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tootallnate",
      "name": "once",
      "version": "1.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tootallnate/once@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@tootallnate/once@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "agent-base",
      "version": "6.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/agent-base@6.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-proxy-agent",
      "version": "5.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-potential-custom-element-name",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c261e440dab5626ca65dfacdbadb98069c617fb7b0d2a83b3874fec2acb0359bb8ca5b3ea9a6cd0ba582c937c43ae07b663ca27586b3779f33cd28510a39489"
        }
      ],
      "purl": "pkg:npm/is-potential-custom-element-name@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-potential-custom-element-name@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nwsapi",
      "version": "2.2.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a754d11ff79d9e05441d56f0a969f15158849aae739c3bf207e4a2939726b8ba463887c37ffdfdccb8aadecc0f17c55a92a9fe82f362390019bbc7636254082c"
        }
      ],
      "purl": "pkg:npm/nwsapi@2.2.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nwsapi/-/nwsapi-2.2.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nwsapi@2.2.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nwsapi/-/nwsapi-2.2.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse5",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39f9ff0931734464d3c70a4d12cf4f3fdde05d2847713ab6e799f345848a7bc024569658eded5fa664df3b2a08be33f91c6ed9d9933b552f4f3e14065b6a4ea7"
        }
      ],
      "purl": "pkg:npm/parse5@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse5/-/parse5-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse5/-/parse5-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "saxes",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4b061d5396cf1cf718068f0dd0accc044e64cc564d28160beb152bd6c7ada5951da1704227aca359d866420aebb2da5bd6add9798e16e97aa73985160a14e73"
        }
      ],
      "purl": "pkg:npm/saxes@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/saxes/-/saxes-5.0.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/saxes@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/saxes/-/saxes-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlchars",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2599c328af01d11083c3ce0535d0c022964af89b89c3eb3b2f3f2792c23b488b94dd45c926c954b61b22fae5815183b03c5c16ed6ecf44b45f50aa718ed8c50b"
        }
      ],
      "purl": "pkg:npm/xmlchars@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlchars@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "symbol-tree",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f50364e4ac0317e06fcfe3f239b9264988c8e64b15518b635bb014db6af634a71f2c9717a7dea1903594dfe5e774eb146fe010f5085fcdf093d8ef823564f94f"
        }
      ],
      "purl": "pkg:npm/symbol-tree@3.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol-tree@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "4.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e8a39514bcb0fd49c67a8e1f1b797d53eac3b5c36fcca4246910fed5dbcd0628c5544342736abd94dd424fb2b75bce22c430c86edd48e7abffeb86216e21e6a"
        }
      ],
      "purl": "pkg:npm/tough-cookie@4.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-4.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@4.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-4.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25977780c5410154244ace8774d668f52768d0b35c41e30d3f70a8cc125bdc9602fd05186539cac4ff9ff285915f8ac73f912ead6c6a0074d2c140a394d29ad7"
        }
      ],
      "purl": "pkg:npm/psl@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/psl/-/psl-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/psl/-/psl-1.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "089d5080a98d8370b0bc0bff90e166b6710dd397f40ff727f509ed80d39095017d760bd54c78f7b7ef093dd8ea6b008793b57f280f9f6d4ab367d5d685ca8f52"
        }
      ],
      "purl": "pkg:npm/universalify@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse",
      "version": "1.5.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b2a5c7e24617de50ff6fbc5d23eabc3427786b5abc3a899bf7fb6da1ea244c27ff33d538fa5df2cfe03b148b1e4c84c3e75e98870e82b2a19fdb74293004289"
        }
      ],
      "purl": "pkg:npm/url-parse@1.5.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse@1.5.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystringify",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "148aa08f6114bd36bb479d2ed2b1acc937edce3626bff6b784edf8e5b64daea69b36a8ed8220cc826a389a452377e9f3539a05ddd0a52aa1483d42b26d4caaa1"
        }
      ],
      "purl": "pkg:npm/querystringify@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystringify@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "w3c-hr-time",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfc3f90ef0cd8ca0e81481caeeaf2bf2569c913ea5fa3a3f61edc73a57bb97d9c808ff657f50a2db97f2f6f1ddd093967b09081735c81228374dd293ec94397d"
        }
      ],
      "purl": "pkg:npm/w3c-hr-time@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/w3c-hr-time@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use your platform's native performance.now() and performance.timeOrigin."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-process-hrtime",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f68e5479c2371a192933a0eb5ebebd3db948b96c4f2a4f58d231c1461768719db2ed81020450ac1e6efd3ebdcec91d80be384391a6c525a0c931845acc782ca3"
        }
      ],
      "purl": "pkg:npm/browser-process-hrtime@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-process-hrtime/-/browser-process-hrtime-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-process-hrtime@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-process-hrtime/-/browser-process-hrtime-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "w3c-xmlserializer",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2dcc3d2617c89288c88db37d0188b3b71297c62d9513d8c497fc6fa8ed9cb00f3962590dce3ed4d9d0f4c2dc1ddc6b55007f870930707ed817f9e84ae226e44"
        }
      ],
      "purl": "pkg:npm/w3c-xmlserializer@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/w3c-xmlserializer@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "xml-name-validator",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "039094a6dc43b2fc4a244537c8ee83b96052273fea8b3ab324a38c21f5091c44db070fec15a0f181de9fc66d5ec1468cd23678e3815ce6f0b944e62eae0ff83f"
        }
      ],
      "purl": "pkg:npm/xml-name-validator@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-name-validator@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "ws",
      "version": "7.5.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9d6c5d6d1f06695dc6ce25d54e9332c3c593f56a296f4b133a6707974de83294f9f2f34ddb16103ebea058c38b37d4d4809384b6433f802972bd6b8c2476371"
        }
      ],
      "purl": "pkg:npm/ws@7.5.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-7.5.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@7.5.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-7.5.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-environment-node",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26de19527c5d3ac4c6c124407ca12713a05cc2c48f34e8a38f089fab9b0315203691eb275d3bcda8a1d880cd210eadf9e3d51ffcacdd5cd627e3031924f9452f"
        }
      ],
      "purl": "pkg:npm/jest-environment-node@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-node@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-jasmine2",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8edabb555c86f12a80a2b0e9029c22249226774576c2fd71cdd85e187446cae4fb8199ba806e3b404b243a5cec3753c6ffa58d682a39a66c0c1c37f70241b6a5"
        }
      ],
      "purl": "pkg:npm/jest-jasmine2@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-jasmine2@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-runner",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83834fb0ce261423b014a5cee29fc7fe4586749a7d57c914458da55fc31ed9dae05ea1bbaeb640c7992ffb91fbc2db7f71d1488e1a98c751eb96a58768ebc369"
        }
      ],
      "purl": "pkg:npm/jest-runner@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-runner/-/jest-runner-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-runner@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-runner/-/jest-runner-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-docblock",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae5ee194005e4ec458c4a8947e91eb42b1b87b6a1b3a24d059f3041f73f13e33ad76c7cb40ee11796499690ec31139b8c6ed3bae5e2afe1e3370a5f2534fcecd"
        }
      ],
      "purl": "pkg:npm/jest-docblock@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-docblock@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "detect-newline",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cbcfec7fbc45e6fd8ecfef09f510914d2f1629503e1380ca2cc58e9f0152549c931bba91c13a7731c96506f4ea53687f44043eee148e4b7c482630e739e03b0"
        }
      ],
      "purl": "pkg:npm/detect-newline@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-newline@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-leak-detector",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ce5df58032f7d4e963145dfb55e07a259c97e73ce184bb5d1fb1c34203be8a06945185c30dd9cf1dde24f6a71412dc72db03ee57e2c3943f360ed8d5322251d"
        }
      ],
      "purl": "pkg:npm/jest-leak-detector@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-leak-detector/-/jest-leak-detector-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-leak-detector@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-leak-detector/-/jest-leak-detector-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-resolve-dependencies",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41038e758e0f137f626b00e7e6bcdb21e3cd8a07dee41f59f751830f569eff134396ef6469ab7c410e442a73665563d5e78854771095c308fa60c811d8eec83a"
        }
      ],
      "purl": "pkg:npm/jest-resolve-dependencies@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve-dependencies@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-watcher",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfaefa4ae0fa67ca3ca9b9841a1a0450538cd7e8df1222f70d71caff1804886d84c8d61f146eb48e5b9672ea58e9d0138df12c290ba26d1792d5d8c89d09e857"
        }
      ],
      "purl": "pkg:npm/jest-watcher@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-watcher@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "import-local",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d923e5ba7d4950f5a833ab77174770d0590217f8d663c92db5c6387f9f7d18b4d28e1d8e0aeba175390942c11c67306a6d764628c2b63aa5b5a19b23b5ffe040"
        }
      ],
      "purl": "pkg:npm/import-local@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-local/-/import-local-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-local@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-local/-/import-local-3.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/import-local-fixture"
        },
        {
          "name": "cdx:npm:bin",
          "value": "import-local-fixture"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-cwd",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ab65a5f631bfab242a47ffa0a94aab7dc4556937efb1d355e737689ef60e8fe7fdf17a52c0917595003a5dcf52070ff2857c45f213a574534d4e43750edab12"
        }
      ],
      "purl": "pkg:npm/resolve-cwd@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-cwd@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-cli",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1dce8738ec18ab8ffbe3f73ad9d104debe5e971f308d8ab1634af41bf9c5acb0cf30546ee9103fbbca8834e224be1c46ee6310e4426c3867d1a48f0be9e15457"
        }
      ],
      "purl": "pkg:npm/jest-cli@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-cli/-/jest-cli-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-cli@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-cli/-/jest-cli-27.5.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/jest"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jest"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "prompts",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37136ffe42e0b8203ba778c4f282f668406cac95a001a901a609a02ba9693d657e5ae3a663aaf6ff36c05673fe4fc6d0940d27cc75d2252256d07abbca5683d9"
        }
      ],
      "purl": "pkg:npm/prompts@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prompts@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kleur",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "793233955392511f89c5d0c57a911870132d67d42a75e7feae7cd675166e31b3b2c2ee6d3b6c3637baea8e800d67993dbf2c212fa06bd55463508813431e04f3"
        }
      ],
      "purl": "pkg:npm/kleur@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kleur@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sisteransi",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6cb186951d50c417329e7d9de589835f83068e566fcb631104344d1cb27c548ea5ebef45522c9314d27422f78e48fd1b7178150cf45c7c6a80d298daa94a5f56"
        }
      ],
      "purl": "pkg:npm/sisteransi@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sisteransi@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "16.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f59afbed0c6d0be5fb7f8c65a42e91b5fa6d1e43139f681bd33442eb6968f6db049550c5b1654bd880961c2a1ea3186224245847e0864f4214784caa5cf2607"
        }
      ],
      "purl": "pkg:npm/yargs@16.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-16.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@16.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-16.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39c444ebc70eb15317a7562fa2797f7f39103b28cb4aeffc6e13c37d0b747b4fc46f6f374ca3f6d05b3632aa0fb2bf52c00e7de6b44203e40ccd873d9c13fe25"
        }
      ],
      "purl": "pkg:npm/cliui@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.9",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "jest-watch-typeahead",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55ae672d225337b605b42da377eef0b287b5a4d7b92b84a12eec7f139887130941f40c5ac6682063bb68f4a52a2a88e1689c37697aade5601be2318f3a896913"
        }
      ],
      "purl": "pkg:npm/jest-watch-typeahead@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-watch-typeahead/-/jest-watch-typeahead-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-watch-typeahead@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-watch-typeahead/-/jest-watch-typeahead-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-regex-util",
      "version": "28.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2cd08832348cb4cbd14af9c8e8558a316a64fb65ea3b321cea446c7b6036266909f5c2e718f6ba2d886901cf370c5d3b63ac200ffdfedff84d05efe7f13cd77"
        }
      ],
      "purl": "pkg:npm/jest-regex-util@28.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-28.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-regex-util@28.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-28.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-watcher",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b78a9caa3f61cdefa3be214f50ddd802d0047859ebfdacc84d740430045fe5c330298d923014670904d72e2c53976d0e47a98b87d28b32b8152602484b29bed6"
        }
      ],
      "purl": "pkg:npm/jest-watcher@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-watcher@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jest",
      "name": "test-result",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "919024c67484f85a84f188d6f2036ea159240bd23b4b5aa67a797cb0670338bae8a4048ff8191c18ac215e8caa42e18e19e618d32fe2c63addfe2111a445c736"
        }
      ],
      "purl": "pkg:npm/%40jest/test-result@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/test-result/-/test-result-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/test-result@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/test-result/-/test-result-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "console",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40f0243f913029d2bf6f122be82d48e15b34ae6da71e200dce3fd9e57d89424ad9a3a22abc2e25759f4af79b45d0776276103c068e9e8314b35053d829c1172f"
        }
      ],
      "purl": "pkg:npm/%40jest/console@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/console/-/console-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/console@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/console/-/console-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "types",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4728e2c8c519acacff73ece53053b5a66ef40dc225493f007964e4a147597af7b0e38c1c359407b0454e88256d8159e51450fcd853da5f2732b39f1c7f69ae55"
        }
      ],
      "purl": "pkg:npm/%40jest/types@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/types/-/types-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/types@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/types/-/types-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jest",
      "name": "schemas",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe5fd55ac76dfda057823b212d6385c85b77215758ca9bb9cb65a7dab38ed6e9fa9e4a889fc48b5f38083185c5c98b11583c85e44b6198a24c21d26f934f20ae"
        }
      ],
      "purl": "pkg:npm/%40jest/schemas@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jest/schemas/-/schemas-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jest/schemas@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jest/schemas/-/schemas-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinclair",
      "name": "typebox",
      "version": "0.24.51",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4fd4e44e9bfaddb9b3f96850d265020b534beb2c22787ef1ede84a2a1c433ed83fc6e4c2b76c86b299428b8adf09b3d81b9ece54c899e43ff4d944e2f0e2d50"
        }
      ],
      "purl": "pkg:npm/%40sinclair/typebox@0.24.51",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.24.51.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinclair/typebox@0.24.51",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.24.51.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yargs",
      "version": "17.0.33",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a9c4108a58f2ebe314ac1e0cf9d75ac524033ec12dbcc36cc43b5403358e7333f4bca24ef434d7f3b47d31c21a8ac9a2b438709b37df0b0c066ecb572dc4390"
        }
      ],
      "purl": "pkg:npm/%40types/yargs@17.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yargs@17.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.33.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jest-watch-typeahead/node_modules/@types/yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-message-util",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c5767f487b06ede7be7328f7f5dbce87b7d10fa099984fb3f4918f9189b7986765ed3abe77a432c41684d65db7758782621a25a94c10bce1f73cc4c5d031bee"
        }
      ],
      "purl": "pkg:npm/jest-message-util@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-message-util@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "pretty-format",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2015bfd3a343a6c4747df994dbd780dfdaf371746097f20d71586513a94c394e266f7107f9b0728e6dde5470fc8b2f2a303700c03131775d6386d41ea6c65d5"
        }
      ],
      "purl": "pkg:npm/pretty-format@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-format/-/pretty-format-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-format@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-format/-/pretty-format-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-is",
      "version": "18.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcb2cc5726acd258e302da1888fa9888bf15597cd451d4e1ae6539fa7db40d9bfe6be0a54687af533c3927153e21e879fdcf3bcada13055f46d4588a7cd25d9a"
        }
      ],
      "purl": "pkg:npm/react-is@18.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-is@18.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "jest-util",
      "version": "28.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dda9fa47c29712464a3f0b7e6e2d814cd9e991025b4820a66227d7809a18ec8f40aa64c6b4a7589bd11e5f588a86867d5ad74dc379b4dba6a21a3f5a8243ab5"
        }
      ],
      "purl": "pkg:npm/jest-util@28.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-util/-/jest-util-28.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-util@28.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-util/-/jest-util-28.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "emittery",
      "version": "0.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6884ea3b09cb6a7a472cd5d924435b3a08d405e1e8703fb1b1226636b8e8bca056e476d2a56dddd69125b3b18540f5165e2c06f7ed0fe06b477c4a82ff833423"
        }
      ],
      "purl": "pkg:npm/emittery@0.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emittery/-/emittery-0.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emittery@0.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emittery/-/emittery-0.10.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddd3ac0075d7524413a4e61ca00c4b228acc4e9e20210af9216de255bec0ee5148a74547867ca79bd8b3c7a4ecb1dac87152044809558ed9ced8af1b83e0a87b"
        }
      ],
      "purl": "pkg:npm/slash@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-length",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f44a74f0a00c527d0e69d9d5681b91744da5eb5e42439d3c92bd1731a7630a57d8a5d0b2beb6c5a7a4da79ba3ccb2c68910e2f89477fc4f3d40381468146b4a3"
        }
      ],
      "purl": "pkg:npm/string-length@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-length/-/string-length-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-length@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-length/-/string-length-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "char-regex",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71b18e8c0a6d7ccd8b5665a1c1114710a4cf90bc0d75d566baa61942df3de725f002c5ac5ce6c21be60de03190fc906d4f818fd5ad653cf762a36cf8d772e64e"
        }
      ],
      "purl": "pkg:npm/char-regex@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/char-regex/-/char-regex-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/char-regex@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/char-regex/-/char-regex-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mini-css-extract-plugin",
      "version": "2.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "189b8009c4bffe3b6ae240ad7798a2fccd1265fece6511fe07176a5d91da25f6fc4c989597e3604113f0898b7612ea9e4a4372767ffbbcff9b704dbb0b999bf7"
        }
      ],
      "purl": "pkg:npm/mini-css-extract-plugin@2.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mini-css-extract-plugin/-/mini-css-extract-plugin-2.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mini-css-extract-plugin@2.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mini-css-extract-plugin/-/mini-css-extract-plugin-2.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-flexbugs-fixes",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7c7fdbe80726a4edb4e4b51d90803bde825a67f434db0563d4cd239ef60d0de1647fd9e4ade95adc6dfd219aca6f308e98586cb0cfa07d7fb8f3a453492609d"
        }
      ],
      "purl": "pkg:npm/postcss-flexbugs-fixes@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-flexbugs-fixes/-/postcss-flexbugs-fixes-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-flexbugs-fixes@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-flexbugs-fixes/-/postcss-flexbugs-fixes-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-loader",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59b6d8a6601a29cbb1fcfeba6d9e346e95ac06e723c7f4d3815573459f7250ef3241f54195a99e27464655a3df1fae21352061eb76be2023f99ea3a9040d30f9"
        }
      ],
      "purl": "pkg:npm/postcss-loader@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-loader/-/postcss-loader-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-loader@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-loader/-/postcss-loader-6.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "klona",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7611b7e035c04cbe614b125b21ec427edf050a1157b66b24a19627a0f5a35d0b9e6d660236455e5772a419e8022bd08fd68b3023fbd089b4b6198ec49bfb0924"
        }
      ],
      "purl": "pkg:npm/klona@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/klona/-/klona-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/klona@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/klona/-/klona-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize",
      "version": "10.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb9c35f3fac37afe66a8445c1b75b919934c25ad5ea1860d1a8f2007bb44c1aa2cd1a8e4dd95c023898719c353e3b344f999d90f5a44a543852ef96d23099e24"
        }
      ],
      "purl": "pkg:npm/postcss-normalize@10.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize/-/postcss-normalize-10.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize@10.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize/-/postcss-normalize-10.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "normalize.css",
      "version": "12.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60061e27e5ea87b7d4a2ed5dd63f571e5e38066b2e4e1893af888dae0090dc9dbb21b857b315c3199d5c5eff10becf7d778ac16cb8922b2dfe59989eb77d8f71"
        }
      ],
      "purl": "pkg:npm/%40csstools/normalize.css@12.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/normalize.css/-/normalize.css-12.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/normalize.css@12.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/normalize.css/-/normalize.css-12.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-browser-comments",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5fd5fdfd6377288bd8f7e84d11152a5fd82772c801036e5769e47e8ec847cf68fcfac6321e4b47c3525d2ae32378ba4692d5e276a0e103b6ffaa6d66ac10e682"
        }
      ],
      "purl": "pkg:npm/postcss-browser-comments@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-browser-comments/-/postcss-browser-comments-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-browser-comments@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-browser-comments/-/postcss-browser-comments-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sanitize.css",
      "version": "13.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "651c0a6e1fde43ac3dbe64e392e1b42288b71c1c0f15c7b43bebfffef7be68eab5a1e0b2ee3315daacf3025a6c36eaa9a820638eb88cd656ed65b17f43c8d5c8"
        }
      ],
      "purl": "pkg:npm/sanitize.css@13.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sanitize.css/-/sanitize.css-13.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sanitize.css@13.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sanitize.css/-/sanitize.css-13.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-preset-env",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f52e0466e6e115152105f37bc7649576cf5f651e0e3226e67a81765992a56caafeb79e5afacda6cc1f79783dcd351500b27d656b87619a51e095cbd3e8f806a"
        }
      ],
      "purl": "pkg:npm/postcss-preset-env@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-preset-env/-/postcss-preset-env-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-preset-env@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-preset-env/-/postcss-preset-env-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-cascade-layers",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8a758ae9282e53828990af60e5645e250c4a47728c678f920675d6187c158900a7e3d49b6e1d422a31af84d69249fb3de4bc356258cab2a8f946e096bb6a640"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-cascade-layers@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-cascade-layers/-/postcss-cascade-layers-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-cascade-layers@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-cascade-layers/-/postcss-cascade-layers-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "selector-specificity",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8e27d9289eff790a54933890a6319aa9779f981ac0764bec7ac37135a1a33c52e4798fc9d3347612cfc73d0443c60ce08c4182041069553e3fd563ae224db1b"
        }
      ],
      "purl": "pkg:npm/%40csstools/selector-specificity@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/selector-specificity@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-color-function",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05cd1feb65a61ddb510e37f97f77b6493c11025f3d37608b6fef62030cebbf82f686772b6c3c27403f4f0aad20b40b7ba4e23695e215d3c1c80547788f10fc73"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-color-function@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-color-function/-/postcss-color-function-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-color-function@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-color-function/-/postcss-color-function-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-progressive-custom-properties",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01203d5b5688cb9ca0b24658b966a6b3807369f0f5d942ef4b2a6668b253da3bd0f06d0cdc8f0f450842d21ee61b46772c8d39f9a8198ea491f7e2bdc9a4108c"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-progressive-custom-properties@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-progressive-custom-properties/-/postcss-progressive-custom-properties-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-progressive-custom-properties/-/postcss-progressive-custom-properties-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-font-format-keywords",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "660ae5cee5008d720e73626e78ad17e6c6438c2b608a6569fcee4212a4dcb394a15816bab2685661b4b4c7971573ffabc9c4c36e38f3a0fd0a4c39d49de6463a"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-font-format-keywords@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-font-format-keywords/-/postcss-font-format-keywords-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-font-format-keywords@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-font-format-keywords/-/postcss-font-format-keywords-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-hwb-function",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "607744aeee28dd1b1b8e6bbabc7cb850a397643f919f6ce690098b45f3deb7af89cf83a3c3c71b5b17b59f8d956974210f70905175d3a28232f0e9156d470bfb"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-hwb-function@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-hwb-function/-/postcss-hwb-function-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-hwb-function@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-hwb-function/-/postcss-hwb-function-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-ic-unit",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3add6b7304406911cd282f6d02aa2a3598637580732a4d4f3a059f84de2e08e138ede6c670b46a5e32a4029543a6389f2fabb6ff9e5e924a6715ca7eb3f39953"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-ic-unit@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-ic-unit/-/postcss-ic-unit-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-ic-unit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-ic-unit/-/postcss-ic-unit-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-is-pseudo-class",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec93de55564777e8f161d50b97cee5be382f5a5758bbe05ceb6b3dbc3fc40fafd04c68f2d23cb4512fdfe811b9dec54c4c1275973299169626a1f04df5e69188"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-is-pseudo-class@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-is-pseudo-class/-/postcss-is-pseudo-class-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-is-pseudo-class@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-is-pseudo-class/-/postcss-is-pseudo-class-2.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-nested-calc",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "242b10b30d708d8c2fd5b266823292a1936f7fb47afb0b870c06e2e5fffb31b16197677ffaff93bc14d4e01247dc6d57d47f3b7479749a1e937d8a206d3fdd25"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-nested-calc@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-nested-calc/-/postcss-nested-calc-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-nested-calc@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-nested-calc/-/postcss-nested-calc-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-normalize-display-values",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8dc39a9c86efe79385290dec61e143fd3d138bb00c5dcf673358595aef26ff6ef6da0393c4583bc58bb84432c92de6663d4550946ce8e23873bd352adf1e1953"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-normalize-display-values@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-normalize-display-values/-/postcss-normalize-display-values-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-normalize-display-values@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-normalize-display-values/-/postcss-normalize-display-values-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-oklab-function",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c9a4982c740ddd03dcb9a60c9bfd47c4cc4ed6e4a6bbbb4097d3f1c831504d5b359e99d7131f75f000d10253a6a75affdaa38bd534b4ccc6188f359b132ba88"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-oklab-function@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-oklab-function/-/postcss-oklab-function-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-oklab-function@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-oklab-function/-/postcss-oklab-function-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-stepped-value-functions",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "773d0b368a378a3a53390a8424b63c9f269aa65eae99b9837208f8003d25815439ef66f67aa0358866584d35a1adcac7ced5830d1017d83198cb0d95063bc2bd"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-stepped-value-functions@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-stepped-value-functions/-/postcss-stepped-value-functions-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-stepped-value-functions@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-stepped-value-functions/-/postcss-stepped-value-functions-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-text-decoration-shorthand",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7355f0289d9e3085abcd07a73745db71fcdc90e2cb262733ab2f98bdf1a6ce855777ba53f457ce6e24847f3b3ce1ba44fd5a9fa44b8067db4245b664671c5b77"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-text-decoration-shorthand@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-text-decoration-shorthand/-/postcss-text-decoration-shorthand-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-text-decoration-shorthand@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-text-decoration-shorthand/-/postcss-text-decoration-shorthand-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-trigonometric-functions",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2829a2cefffff86dbfb3642dacf3497eedc9b4eccef6ebc32cc86dccd0072d5d71058ba4ae86fae241871be7c8a22866e3c30214ee7e398912c41f2a41e3b3a"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-trigonometric-functions@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-trigonometric-functions/-/postcss-trigonometric-functions-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-trigonometric-functions@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-trigonometric-functions/-/postcss-trigonometric-functions-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-unset-value",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73c278ae83c120b9de940b1d2ebe1738047f1ac4e6d06262e17a5c7efa1693753a2a24c2aa215873adca851310417df98d8329e00a3c223f7e21946031f269d6"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-unset-value@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-unset-value/-/postcss-unset-value-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-unset-value@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-unset-value/-/postcss-unset-value-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "autoprefixer",
      "version": "10.4.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3be03a2d65792c31d2243dcb8c7628362e152ec8ff5a18bb93acc6d76c5361a538710f28c5019c917357f1c4472b9c8e67fa695477b46415c6cd257d8d77556d"
        }
      ],
      "purl": "pkg:npm/autoprefixer@10.4.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.4.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/autoprefixer@10.4.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.4.21.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/autoprefixer"
        },
        {
          "name": "cdx:npm:bin",
          "value": "autoprefixer"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fraction.js",
      "version": "4.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66c0dfc4ee75c06017444639e5aee56bd2d2716a70bfd47122b60006b96f3850651ff4a13e7aedb177ae5087d728a39589c37143ea3c2536c9be34b833cf727b"
        }
      ],
      "purl": "pkg:npm/fraction.js@4.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fraction.js/-/fraction.js-4.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fraction.js@4.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fraction.js/-/fraction.js-4.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-range",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6dda24fd7bca208de75299259d5e8fda1c6d30dac26e83a301cc81b909d61213baeb9170ad2351c54f80aa9b32bcee8b80660fb2937e96ee422edc388cf44a34"
        }
      ],
      "purl": "pkg:npm/normalize-range@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-range@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-blank-pseudo",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "552f745d6b6c1c6aa8334b782a91f4e777387a1c59d84e87b4623bc7af18155d294e8fd09a457f60503e36796f2bc82ec5954d58642154d2460b7f50f1717839"
        }
      ],
      "purl": "pkg:npm/css-blank-pseudo@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-blank-pseudo/-/css-blank-pseudo-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-blank-pseudo@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-blank-pseudo/-/css-blank-pseudo-3.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/css-blank-pseudo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "css-blank-pseudo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-has-pseudo",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56c7b4c694752bd30d969da3e70d69816209b66d5af2a4b42704bd8281587089a3947126cb03fd554174e5a1815f31a90c917ce905e4e0bd32a419b03e1180af"
        }
      ],
      "purl": "pkg:npm/css-has-pseudo@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-has-pseudo/-/css-has-pseudo-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-has-pseudo@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-has-pseudo/-/css-has-pseudo-3.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/css-has-pseudo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "css-has-pseudo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-prefers-color-scheme",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e01a8c6d992c464250c76cc08eba2488631dd3b46a39ad88c48aeb375d25c817bdc619fd0c4be350aefd27a8e47a2bfd0fd85015729bea0d63c14eb68f388964"
        }
      ],
      "purl": "pkg:npm/css-prefers-color-scheme@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-prefers-color-scheme/-/css-prefers-color-scheme-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-prefers-color-scheme@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-prefers-color-scheme/-/css-prefers-color-scheme-6.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/css-prefers-color-scheme"
        },
        {
          "name": "cdx:npm:bin",
          "value": "css-prefers-color-scheme"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssdb",
      "version": "7.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "961437d931647355f879379f19f60fbe0a2f452cc83287c792281f1fc9d6b7244be1724bb1184916b791bc480acdea6def1d6b8c1bb2dc9fccbab5cb685c56fc"
        }
      ],
      "purl": "pkg:npm/cssdb@7.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssdb/-/cssdb-7.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssdb@7.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssdb/-/cssdb-7.11.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-attribute-case-insensitive",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c889d5d5f1f0ebd242addbcbea922f387d12bc556f1e4ee21ae0f0a1bf632a2ae4fa0bd5239922b37a7e8a69685612862fc311426bb9ffb42d52677b72ab849"
        }
      ],
      "purl": "pkg:npm/postcss-attribute-case-insensitive@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-attribute-case-insensitive/-/postcss-attribute-case-insensitive-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-attribute-case-insensitive@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-attribute-case-insensitive/-/postcss-attribute-case-insensitive-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-clamp",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af2e1bd4b968ffdcf3f8f282fb4df42949cf2134c900778ec237c0cb207ad1e4f4028ac62ddce9e76b37d4eb0f44745ff0d7219201681b6cba7c27e7d485753b"
        }
      ],
      "purl": "pkg:npm/postcss-clamp@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-clamp/-/postcss-clamp-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-clamp@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-clamp/-/postcss-clamp-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-color-functional-notation",
      "version": "4.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2ad301465469bf6ce82a719310b8ad5805115691ebfd8f8a9be2eaa720be762256a65c6c31c4a010e1ad7cf26fb11f8760827c740db5ca96708aee0d32147a"
        }
      ],
      "purl": "pkg:npm/postcss-color-functional-notation@4.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-color-functional-notation/-/postcss-color-functional-notation-4.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-color-functional-notation@4.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-color-functional-notation/-/postcss-color-functional-notation-4.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-color-hex-alpha",
      "version": "8.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cba360c2442f5e138c36266b8a8150377c62f7774d641aaef9da95402c5ebcaa918b9b1d90ae4f754132a4754aaaa78e53d4ad5757c22142972ed61a0041f95"
        }
      ],
      "purl": "pkg:npm/postcss-color-hex-alpha@8.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-color-hex-alpha/-/postcss-color-hex-alpha-8.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-color-hex-alpha@8.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-color-hex-alpha/-/postcss-color-hex-alpha-8.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-color-rebeccapurple",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a46c64b951089f02c782437151ce2c760e20de9cbbcd478243db0c7f0c87013f84ce4f1ae0e69a559f25218e7ea0da80fc15d780bc97bf4fb9c073faf11efd86"
        }
      ],
      "purl": "pkg:npm/postcss-color-rebeccapurple@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-color-rebeccapurple/-/postcss-color-rebeccapurple-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-color-rebeccapurple@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-color-rebeccapurple/-/postcss-color-rebeccapurple-7.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-custom-media",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef28b6e6f0c0a070246e10335fd747c76c9cea7b52e2342f7a3acd702f9cb102405e38f5e5eed57167cc80ba813406cebea8b9b886bd86e395c1d1db7feb0aaa"
        }
      ],
      "purl": "pkg:npm/postcss-custom-media@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-custom-media/-/postcss-custom-media-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-custom-media@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-custom-media/-/postcss-custom-media-8.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-custom-properties",
      "version": "12.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d080c9621814f310efd4a63af95814c2e42456d998cd1c2ef9d3239e674c69f5d8bfce925aa7f191ceea743bd64b7f2fb23684b6ff1ed2f18e510ac088c04ba5"
        }
      ],
      "purl": "pkg:npm/postcss-custom-properties@12.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-custom-properties/-/postcss-custom-properties-12.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-custom-properties@12.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-custom-properties/-/postcss-custom-properties-12.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-custom-selectors",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e05649b28960f0983dc96e90a6078e52bef9420facfd086e887ba21eadedb65b968779aea859aec43366e99efd858f723de0bdd56edbd7f4aab04a2e5a1734a"
        }
      ],
      "purl": "pkg:npm/postcss-custom-selectors@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-custom-selectors/-/postcss-custom-selectors-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-custom-selectors@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-custom-selectors/-/postcss-custom-selectors-6.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-dir-pseudo-class",
      "version": "6.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7aa9f89bbd0fd37d4f17b65022f4a0cbd452279b88db5ef53bf38eff3711358a496ef69e2855256abd5a27bae682242d6e6d0548fb117b08e9752d0e7b0ecc3c"
        }
      ],
      "purl": "pkg:npm/postcss-dir-pseudo-class@6.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-dir-pseudo-class/-/postcss-dir-pseudo-class-6.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-dir-pseudo-class@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-dir-pseudo-class/-/postcss-dir-pseudo-class-6.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-double-position-gradients",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "197f85b84fee051e9eb2438afb8be45e04faa4391ec4ba243dacff01b2676bdb392b3a7fca5e3cf2928f8e1cb4a1b078ef9a2f7d3d56bfc868ed4fdc1cd69181"
        }
      ],
      "purl": "pkg:npm/postcss-double-position-gradients@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-double-position-gradients/-/postcss-double-position-gradients-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-double-position-gradients@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-double-position-gradients/-/postcss-double-position-gradients-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-env-function",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92903a16c2eb6be36a7059cbf354e7b14f99ee8ac6b434f170e865ea9c17784ab5c853e944c9020e91e1af3f021500ebfd67e6d232e2350d4eb0618f8e5a8fc0"
        }
      ],
      "purl": "pkg:npm/postcss-env-function@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-env-function/-/postcss-env-function-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-env-function@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-env-function/-/postcss-env-function-4.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-focus-visible",
      "version": "6.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41c2ae514fdd80db2cb482ba1c42c5453e58de56eb30b10ec06f80e2ce5c03e7f1dc0df2fc94eadd7f4b68e8f7382dc02c7d17ab2ae040881ecbf30867c59ccf"
        }
      ],
      "purl": "pkg:npm/postcss-focus-visible@6.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-focus-visible/-/postcss-focus-visible-6.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-focus-visible@6.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-focus-visible/-/postcss-focus-visible-6.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-focus-within",
      "version": "5.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bef8c337ef82d26bbc8f3e1a7f9779d82075f38a2083fb12c40152fa850942ad92b827bb4f9536888b1526db02a7677a4788f48ebe7eab7acf9015599170fd7d"
        }
      ],
      "purl": "pkg:npm/postcss-focus-within@5.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-focus-within/-/postcss-focus-within-5.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-focus-within@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-focus-within/-/postcss-focus-within-5.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-font-variant",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5f9a405a0802c3ef608ad9af62e3af2603ffadafdff5701c5144c5ce51a66a3b8de858f4798a67323e35f0bafecf5db0a27789dd94fe735a189d41555ade198"
        }
      ],
      "purl": "pkg:npm/postcss-font-variant@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-font-variant/-/postcss-font-variant-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-font-variant@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-font-variant/-/postcss-font-variant-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-gap-properties",
      "version": "3.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22e13a80a49da1435cbe4188a9db63b5c32d6481725d986615de5152583dee2544be9d4164a5799e0b008c28eb572fb5e2e84605097db739a2d50c2ae24a953a"
        }
      ],
      "purl": "pkg:npm/postcss-gap-properties@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-gap-properties/-/postcss-gap-properties-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-gap-properties@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-gap-properties/-/postcss-gap-properties-3.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-image-set-function",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f53dabf6bb2f6339b99ddb0113c5a0b6b325213ed56ed4df13b6f70509ee754aa705c068ecbef9f2873ea3ea5d8ff754574979c23c1276378e1f60d9b5fbfcab"
        }
      ],
      "purl": "pkg:npm/postcss-image-set-function@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-image-set-function/-/postcss-image-set-function-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-image-set-function@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-image-set-function/-/postcss-image-set-function-4.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-initial",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2e783eeb3ea5fc3e7d712488dacb4019788b83a05f95f95bccb7fb8e9e7fb87b350a85933f36890378fe83c0c372228601cae37ff782109ede4512468de7dc5"
        }
      ],
      "purl": "pkg:npm/postcss-initial@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-initial/-/postcss-initial-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-initial@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-initial/-/postcss-initial-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-lab-function",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6e5e59788ac474dc2ad0b26c72cfdd8b241db15fd9fea592798c4f4981c9e6b026a698bc8a765ceb0629fedb9772eb02237e126928100df3482c4e50a0464db"
        }
      ],
      "purl": "pkg:npm/postcss-lab-function@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-lab-function/-/postcss-lab-function-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-lab-function@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-lab-function/-/postcss-lab-function-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-logical",
      "version": "5.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4475f1a6509e2e1f558e29ef32b64e36aee29b8c23586951240aa60152d7c99697c1f0d63fbdffa2ae0d748a7e399c21414323d338ea0df339163eea6f2f81e2"
        }
      ],
      "purl": "pkg:npm/postcss-logical@5.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-logical/-/postcss-logical-5.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-logical@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-logical/-/postcss-logical-5.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-media-minmax",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8352f15ff50745653b82520d20d2e3521d5949e57d654b30d98cf4856a2096be382cbeef2f115c6d6a13eb2cc8a72031041a7c7a7017ba8aa771e585b3d3cc1"
        }
      ],
      "purl": "pkg:npm/postcss-media-minmax@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-media-minmax/-/postcss-media-minmax-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-media-minmax@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-media-minmax/-/postcss-media-minmax-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-nesting",
      "version": "10.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13032461c87188388a5219491b35ac0fd6f6cefabfaf6492b9b711ae03fe8ee8cc5c5ceabc034bb75ea5240342fb9b99ea18c8ee5a51988e8ef09225fbc97528"
        }
      ],
      "purl": "pkg:npm/postcss-nesting@10.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-nesting/-/postcss-nesting-10.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-nesting@10.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-nesting/-/postcss-nesting-10.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-opacity-percentage",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "027e816b8a470620edc95a522f299450444ca36714eecf8e6f3e814eb4be83191b9d204d292b83d0055473e0a904cae954f28a7e8573d164025fe4e7b2dd22e0"
        }
      ],
      "purl": "pkg:npm/postcss-opacity-percentage@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-opacity-percentage/-/postcss-opacity-percentage-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-opacity-percentage@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-opacity-percentage/-/postcss-opacity-percentage-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-overflow-shorthand",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2d625ff29472bc63d6dc0673cba377e86052cbe9ae8093edc44013ce4d1ee5b8c6023ac8954d493588bbcd7fab553cd1977282fd1e8cf7ee4a5fae244815be0"
        }
      ],
      "purl": "pkg:npm/postcss-overflow-shorthand@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-overflow-shorthand/-/postcss-overflow-shorthand-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-overflow-shorthand@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-overflow-shorthand/-/postcss-overflow-shorthand-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-page-break",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d491aef280a35572daf6af6b153a3831b79e03914c7b4d3ff42ee5378bdaeb4e9175bf879315ed5ec9840eb22b690d757c6cff5af2966bc80cb822a4ad7a53b1"
        }
      ],
      "purl": "pkg:npm/postcss-page-break@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-page-break/-/postcss-page-break-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-page-break@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-page-break/-/postcss-page-break-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-place",
      "version": "7.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c11f2281a651380e99e29bf477e6ef56bbc66381951e2841081422797158de4b92b8cc8e9849e77c5cc797fb50baa1d991f90854111b0ef61c15f1e6a527adf6"
        }
      ],
      "purl": "pkg:npm/postcss-place@7.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-place/-/postcss-place-7.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-place@7.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-place/-/postcss-place-7.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-pseudo-class-any-link",
      "version": "7.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6c0ad6643ba7ffe4c2fd59c4cb708c95d72cfd0f5adfd2d59cfae94a72f577d2cd2264a4bf38dc844efa16b2beaf9eb996f97f8a9ae2b7815ff0e445a74f7ef"
        }
      ],
      "purl": "pkg:npm/postcss-pseudo-class-any-link@7.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-pseudo-class-any-link/-/postcss-pseudo-class-any-link-7.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-pseudo-class-any-link@7.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-pseudo-class-any-link/-/postcss-pseudo-class-any-link-7.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-replace-overflow-wrap",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a617b4813e9853e203cf70a65ceda0e4c1e1e228410ef1c95afc68dc04af9c90ac6266c948bb70b8182456dc335f2f4a3bc96ee4310bbdc656759174572d7b7"
        }
      ],
      "purl": "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-replace-overflow-wrap/-/postcss-replace-overflow-wrap-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-replace-overflow-wrap/-/postcss-replace-overflow-wrap-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-not",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d62f5a7df8c07bdc6eff2f6ea961feb43e2bebf84369726bba4f319f6c75bf3c42d94dc9dcb28edf3256e02cb194d840e7aa400c9fdd8e9130a47d510a5236ad"
        }
      ],
      "purl": "pkg:npm/postcss-selector-not@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-selector-not/-/postcss-selector-not-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-not@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-selector-not/-/postcss-selector-not-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-app-polyfill",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b19e35731894e65948074d37cb1c50058ac0441a9ed2b7a9a8f4d36014e632a4f3f6ccde05b137ec17a1084f3dd4d66c99d66aa8ffb158a753ddea37bceccdf3"
        }
      ],
      "purl": "pkg:npm/react-app-polyfill@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-app-polyfill/-/react-app-polyfill-3.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-app-polyfill@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-app-polyfill/-/react-app-polyfill-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "core-js",
      "version": "3.41.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "489e3f107c12dfa40c25dea1fd183e1b2478039c44d05488dde67e8815697ea7f5c747934a0d6c9962c7ac0fb68d04e165287dedf992805494f01eb59f1a2cc4"
        }
      ],
      "purl": "pkg:npm/core-js@3.41.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-3.41.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@3.41.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-3.41.0.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise",
      "version": "8.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad93cd3ca4ce61534410a15aab51ea4e03b0643fb8fd81d2e6e90bcd00b2a648fe3a4631ee2bf4980f759499693cf67cbcc6aedc82068f9425c2bc7ef228929a"
        }
      ],
      "purl": "pkg:npm/promise@8.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise/-/promise-8.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise/-/promise-8.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0521d680348088ab39d28d917bca69be9dec7951d7491338e1c752b13f457cd1145192ce196542b2259a44f58cd599e7fa6a99d4e7d5677cf70d61334a9ee144"
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raf",
      "version": "3.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4aae025b8421c0e1c4f2e727e89df832ab5909e5853f66904a6ae5ae8620a805753e34ad221257c58b9381421f90493bcd32e39888cb994e6af9f6c3d4d9ce24"
        }
      ],
      "purl": "pkg:npm/raf@3.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raf/-/raf-3.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raf@3.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raf/-/raf-3.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec40079722c7239e9510874ae7bbb01dd1ca21a0066e75cf8b0d3259b6ab41938a68aa6f508816d2359154b89ab6733e5d7952c2c6a72011ff87318c26e94ca3"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.13.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "918d40655af645afadfa9895689e20c5a15a45e6551f8d0028da3b5025fa5be744c01a3fda8649cea7ee375a8bab5a0be39a39e9c3da4d710bc2b4e1f05a6082"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.13.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.13.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-fetch",
      "version": "3.6.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12a862154e9d68e03c9298ce5932f4a25855385de2eceac5cd26221ac10c07c19c5d2f91af36ae004457eb9c4c78d595ab103a1d71f69baf59f4b68a29d8ac7e"
        }
      ],
      "purl": "pkg:npm/whatwg-fetch@3.6.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-fetch@3.6.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dev-utils",
      "version": "12.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3822fc66af5eca8d4ba9caacc5a1d7bac4a863c2e1090d1396289cbf06d8642fb5a7e8d27c878584ea4fdec40bfa2264bed2864b4515b98ff68834c1f278679"
        }
      ],
      "purl": "pkg:npm/react-dev-utils@12.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dev-utils/-/react-dev-utils-12.0.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dev-utils@12.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dev-utils/-/react-dev-utils-12.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "address",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e01fea2827de13f38351a014a52c1fcdace8e71dbd583e2bdef5e25ac07b2369920c08a1c04a8a3be83c1842d9510492028e5ed574d88776557cbcb105cd769c"
        }
      ],
      "purl": "pkg:npm/address@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/address/-/address-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/address@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/address/-/address-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-port-alt",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6d43292df8ba9f24504461a0c84f1ed2edc47b989ff34262d7676aade70d386a29d8670ead05ff5d06e9cc8d579539d615454cd4384e07918e49efebadb5be5"
        }
      ],
      "purl": "pkg:npm/detect-port-alt@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-port-alt/-/detect-port-alt-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-port-alt@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-port-alt/-/detect-port-alt-1.1.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/detect, /app/demo-app/node_modules/.bin/detect-port"
        },
        {
          "name": "cdx:npm:bin",
          "value": "detect, detect-port"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filesize",
      "version": "8.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63982f9b90817c5c8edf59a1fc2b11dc64bdc33f26ecd6ba1228fe2b283bf2db4b405b020e6c4e3e248b1e1b66f27c62a1b9de599cce18486281cfb4a1d2775"
        }
      ],
      "purl": "pkg:npm/filesize@8.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filesize/-/filesize-8.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filesize@8.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filesize/-/filesize-8.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fork-ts-checker-webpack-plugin",
      "version": "6.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49b1ff97d8a498c5b271de69b8724a4e464929d745e2244bc96dc3799d3c1d323b346c8b4b7f0c5ddfca1a0796ba640eed83506d6daefcdb4f4f6628c1b3da19"
        }
      ],
      "purl": "pkg:npm/fork-ts-checker-webpack-plugin@6.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fork-ts-checker-webpack-plugin/-/fork-ts-checker-webpack-plugin-6.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fork-ts-checker-webpack-plugin@6.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fork-ts-checker-webpack-plugin/-/fork-ts-checker-webpack-plugin-6.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cosmiconfig",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5bdd92faf8bf1bf492cb0b1dd9768672e3ed840a9842328d8fc2a80fd6d95f56ae8ce9845ecb3049b6f596b5b0d2a4dafd867f7aa640a266a51c14473ee7842"
        }
      ],
      "purl": "pkg:npm/cosmiconfig@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "9.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8376667a94b7d3fec1485a91be8a370ce310bbb223ab13b99c20edfb333d5d68dbdf75a0ef388d4fe42fa9bb9cdfe816a733b4d89b9b5729361b866fa3539"
        }
      ],
      "purl": "pkg:npm/fs-extra@9.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@9.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "at-least-node",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faafedec492fd440d8da5e8675ae8b2e25f5e2b53d4d5db459ade87de426c0f1596ce328f435eb2db3a315a69c9645ca5a27486a8a7000e6d00eac16b46523aa"
        }
      ],
      "purl": "pkg:npm/at-least-node@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/at-least-node@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2294a148e90405e67c4364b167d9d323bdce218e0fd6920eeb1ddde32bafc0e1ad4797d5457505af801d54306a14f78a5a7753fff0dedf31c1272e74a28eef0"
        }
      ],
      "purl": "pkg:npm/schema-utils@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e162bf6d86668fcc4bafe1d408e0c7185d59173b187df6ac2d480488c058e1f82d96d74ee81e1626d9526cf6834cba584dc195c0cdaa2e715320211c371b3790"
        }
      ],
      "purl": "pkg:npm/tapable@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-modules",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3466df989069f71f08c722527753fea2d60af2fa27a0969cb4ea20ad57c5448004635ba48a5f1148a0f3d98a3bc21d688a1979d65febe96e1ea6478a247a8bf0"
        }
      ],
      "purl": "pkg:npm/global-modules@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-modules/-/global-modules-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-modules@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-modules/-/global-modules-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-prefix",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b00a89c9495087546343eb1ded98c68a710bf05cb8637649a89b2d96f86a1aba2f183e06205c965ec218377d60be0e57eaa90b9683c030aa31930f69c03d55a"
        }
      ],
      "purl": "pkg:npm/global-prefix@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-prefix@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "255ff2ba0576bb35b988c4528990320ed41dfa7c6d5278de2edd1a70d770f7c90a2ebbee455c81f34b6c444384ef2bc65606a5859e913570a61079142812b17b"
        }
      ],
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "6.0.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221"
        }
      ],
      "purl": "pkg:npm/which@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/global-prefix/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gzip-size",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b1ed962899fea3a8f4d0e3e5c2a541b25ca1e4e56c1e4be7b4e4c04ee3fcb7589e519263d734abd7f9bc756de85520b570afa25242f64092ed36d421cf5c6dd"
        }
      ],
      "purl": "pkg:npm/gzip-size@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gzip-size/-/gzip-size-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gzip-size@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gzip-size/-/gzip-size-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ed0fa606dfbd190888bff464da24a431593643d38e7ee11e214e4ff1d54ca8a9a77227dc7d0a04a2d519550d017c536b312cb4a716409a32286a9631c85a032"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "immer",
      "version": "9.0.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6dce0d047a8ea927d15bb3ce3241dde752ef0a569e317a66f1dc747bca04d863916eae5a44aec1c65e05cb354b746b4b9af2ca2fb0530c11b9002426e075a34c"
        }
      ],
      "purl": "pkg:npm/immer@9.0.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/immer/-/immer-9.0.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immer@9.0.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/immer/-/immer-9.0.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-root",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0063ab88da7deaf3417771ed53e47314473be457d1e729a262ff04e79dc8ef548279706232c54352d762a3538416facfc8b210f6d551e51c572057b93d416332"
        }
      ],
      "purl": "pkg:npm/is-root@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-root/-/is-root-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-root@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-root/-/is-root-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14c2532cc5df08b30b7c9c5c5fd3c5a97e6a0fcf19e4c446699095cdfbaa79948fb32881cecfa96a10d08db216cf6408ccf673d0d5fd672e055f79662ba60722"
        }
      ],
      "purl": "pkg:npm/loader-utils@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-utils/-/loader-utils-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-utils/-/loader-utils-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-up",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c3cb04e1164d62e0140ae2dc0f43a4c0e114fc6c363deb27ae0950562f778f0110a210a0d14ab3466c5220509a4ba7e5de211eb9bfcadaed6b89385501b6430"
        }
      ],
      "purl": "pkg:npm/pkg-up@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-up/-/pkg-up-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-up@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-up/-/pkg-up-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296"
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4"
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549"
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e90bb198c220d8438c182def8503c96146385008c7101ae4a0186a83920fd07ab456c3d0a61914f4892395452649dbd34c2d9808cea6a58c9eb7a1a2f834825"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-error-overlay",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48dfd4e98b717f5406930ffdbdee58f8dc416d933a1edf79b6e5cd30ab3c109c856bf572ffe0a8decb68a772811c045f9ff822bfe2e3d6e5274df389de6a0511"
        }
      ],
      "purl": "pkg:npm/react-error-overlay@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-error-overlay/-/react-error-overlay-6.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-error-overlay@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-error-overlay/-/react-error-overlay-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "recursive-readdir",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f07ac5e59b179391401fd760b31dc19547abef79c886e8fef4ead0c046cb4cf381cc690bd65b05091d356a6faffb49b60a66ecd673f5da12c3979140ec4b3328"
        }
      ],
      "purl": "pkg:npm/recursive-readdir@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/recursive-readdir/-/recursive-readdir-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/recursive-readdir@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/recursive-readdir/-/recursive-readdir-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-url-loader",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3954431ccd544471bb53ec1cfe0bef7a7943b91c336f76d84888c077e2dec5705f1e85cbb8c02d2c4a03d4b9bb375d6d90dc234b264fc126b094f70551ca688"
        }
      ],
      "purl": "pkg:npm/resolve-url-loader@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-url-loader/-/resolve-url-loader-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url-loader@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-url-loader/-/resolve-url-loader-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "adjust-sourcemap-loader",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "397c0de5bf690945cd407269c300f6a8fe346f21264a0ce3f01e32752374b8c3585a216627ac7a2b052594c99f93c470bbf1c90c547b53cb9bb160683745e9d0"
        }
      ],
      "purl": "pkg:npm/adjust-sourcemap-loader@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/adjust-sourcemap-loader/-/adjust-sourcemap-loader-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/adjust-sourcemap-loader@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/adjust-sourcemap-loader/-/adjust-sourcemap-loader-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-parser",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c972d1a9ab5c0ae2ad547b16acd83424bde5d7319f757784bc36b46ddbb8b420d0c3446930366ca9b93245352728c474b5717adbb576a045a304468476a4f0b5"
        }
      ],
      "purl": "pkg:npm/regex-parser@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-parser/-/regex-parser-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-parser@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-parser/-/regex-parser-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "postcss",
      "version": "7.0.39",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca2a1aca335b1e7eb3d7f072c326f6638b37caf0c079718ecb1a83f8b9d53a29eae8c76677ef925b6c14355cdabf2c87c5debe0f1cd6188ba8b20e8fd518fcb8"
        }
      ],
      "purl": "pkg:npm/postcss@7.0.39",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-7.0.39.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@7.0.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-7.0.39.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70c943a9a2c4a9f49a5bc67b379270fa5c885bcebd1334fbdff179961b58f5c2c6a15c525f39df81f5cc3b46792b4a344364e44d7abed0a16c76749ede30d588"
        }
      ],
      "purl": "pkg:npm/picocolors@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picocolors/-/picocolors-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sass-loader",
      "version": "12.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0b4da1f4602b57e1c7e7259c4a48b032825103d276a261f346d625df539c352cd67eba4a00e43b720c8379ce629567060d24fe0a45ce58de191681afbbb587c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sass-loader@12.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sass-loader/-/sass-loader-12.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sass-loader@12.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sass-loader/-/sass-loader-12.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-loader",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0689313e82e3ca5de23ab82459a6a46b1aa77a5009492fb457e0ded24288aba9725ab5ee88f8184c6a7acf78879aa96328068b5f065af9cb43f0671c449795be"
        }
      ],
      "purl": "pkg:npm/source-map-loader@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-loader/-/source-map-loader-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-loader@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-loader/-/source-map-loader-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "style-loader",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d16a97cebb0c4f26fcca36491c3ab09a7c1126f8402caf4b7d1b5173a07851359ef008a360b65867db61b894d973655f41620d0035bf8fe2e22677f2d91a02d7"
        }
      ],
      "purl": "pkg:npm/style-loader@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/style-loader/-/style-loader-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/style-loader@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/style-loader/-/style-loader-3.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tailwindcss",
      "version": "3.4.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c37dc4d9a0af4833f4b56f5166e35769d5e59075ea1734a441ec3f6886b68bf4a3f1f4e1c70a2fc255c748f5d36c01f010884115701e75484fdadb9e00a3fc3a"
        }
      ],
      "purl": "pkg:npm/tailwindcss@3.4.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tailwindcss@3.4.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.17.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/tailwind, /app/demo-app/node_modules/.bin/tailwindcss"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tailwind, tailwindcss"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@alloc",
      "name": "quick-lru",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52b700041fb86d4ac5001c1b96e4c8044ad7c2f6ec53f57b4d959f99b8097db930881bb3892f60c5d383532ba279c7dd190f398e094c5ba8ee4b7fb3e53b0a2f"
        }
      ],
      "purl": "pkg:npm/%40alloc/quick-lru@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@alloc/quick-lru/-/quick-lru-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@alloc/quick-lru@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@alloc/quick-lru/-/quick-lru-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arg",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d88f214e2ca43dcb9ec9bd0e902e8f1d02036ab3087c33544c25875076e4fac5b59280adfa3ff67fbfea7cf3ca4cebd8cc31f4bc5ddf05e88d6443f23d1d41a"
        }
      ],
      "purl": "pkg:npm/arg@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arg@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "didyoumean",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "831b727ea320ec62b285099bd39e8aeccdf1b33cbf9b21fcc3e078453f905c142cbc039d7375f29aa0c33c7c750603e0b1d000e522227e89daf3d62d4404c3cf"
        }
      ],
      "purl": "pkg:npm/didyoumean@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/didyoumean@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dlv",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f87972b728e53ca9c81bc5ee446f16be604ff31b3c3fbd72f9228a4ba6575a81202ee78fc6d0e8504887ed691d78f5ab439241a44e9aa15a9f65f2544248d7c0"
        }
      ],
      "purl": "pkg:npm/dlv@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dlv@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jiti",
      "version": "1.21.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe298a346e046d636b563a0d0bfd47e7ff46172fadaa31811c2692b0df8fd919cfaa3b0b9afe940f7123f8a8fc9c159a440c3293b90ae5951cf8e11ab674d1dc"
        }
      ],
      "purl": "pkg:npm/jiti@1.21.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jiti/-/jiti-1.21.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jiti@1.21.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jiti/-/jiti-1.21.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/jiti"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jiti"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lilconfig",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fef945280a07e4282ddc87be24b8516f03ac09078f001894ded2757a01afc90fb7dd1fef730336665d9047f2f38ec05e22d3edde84955daa67fa6e27403be9cf"
        }
      ],
      "purl": "pkg:npm/lilconfig@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lilconfig@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-hash",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4529fd17af0f8c7f47aad96db129ea602d575e859ef418eee7edb5dd1f7c70d1adb5a83dabdc80393cdd6ecaaf21aeda366e567df059169598af6696ae495603"
        }
      ],
      "purl": "pkg:npm/object-hash@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-hash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-import",
      "version": "15.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "869afe274e41d855585005c778ad58c88dbaec9fdd0c384c53a07a722be6f21498d636099c15f1cca0ca0ecc33266b4b1ebcab8e19c38eaaa9ff8f6df0500b7b"
        }
      ],
      "purl": "pkg:npm/postcss-import@15.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-import/-/postcss-import-15.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-import@15.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-import/-/postcss-import-15.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-cache",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b076ffc5b7b2233a09bf8b4c6f3436752eb4403517dec386f6a6b1773963102f12dfbb76d2f055610acad208c2b8951e7a63dc9af804e1a13a43093c429a944"
        }
      ],
      "purl": "pkg:npm/read-cache@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-cache@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-js",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7432c5f2910ed7dd6124cb651c53d16bcc6c8b31da33cd8c2df364507754b55115ded813a79a23fbca9b12a60ce7b48b7dcef82926f0fffe1278999ad8b45523"
        }
      ],
      "purl": "pkg:npm/postcss-js@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-js@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-css",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40e4af7af86c9628e0630471e91bfbcca74c17c95b466c7eb901b1dbebc373e288fde067b32f648ade5a8f6dc0806bb7a5ae2df408306e75d6a92fa2398fb668"
        }
      ],
      "purl": "pkg:npm/camelcase-css@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-css@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-config",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d2561c8918bd34c0c5683d4cc05409db1285b2a91c648efeb8b54978dbb48a9cfac436daba849c14a23ae8333d9507e43579d9a2e087eb00fa5a9a2e5556031"
        }
      ],
      "purl": "pkg:npm/postcss-load-config@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-config@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yaml",
      "version": "2.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f6da08b38ed8eb70fe55b96e687d77f58475c0c5750a766766541f7a57f54da2872518d27bcbbfb27a4eb5a8c2495118f61b07f22e20c7d88316823e0e41a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/postcss-load-config/node_modules/.bin/yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-nested",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d06eddbc2ae942e402731be719b63f64bca07ddc214274bbe88355852dfd43fb198cbcf1a506cb64a531197cae7e00df617c9a1cc81142362ab24b8f1ba60cd"
        }
      ],
      "purl": "pkg:npm/postcss-nested@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-nested@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sucrase",
      "version": "3.35.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f046d50e2bbd88dfe7112c31792c4329ed1dba7b5ad463a51ee7e64925f1303db3dbfb4c6690cca6f5d01ac73e6a31a8f32dae6149a2c5a49151cfd03e843418"
        }
      ],
      "purl": "pkg:npm/sucrase@3.35.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sucrase/-/sucrase-3.35.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sucrase@3.35.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sucrase/-/sucrase-3.35.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/sucrase, /app/demo-app/node_modules/.bin/sucrase-node"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sucrase, sucrase-node"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34e2a6f31864cc08f3171f01dafe4e0074febb9a5141cd9409ad95abd8d82ffdf5a36c22f66c4103b2c816cdec5795520b8f73ea91217db3142ef4a12a3dba58"
        }
      ],
      "purl": "pkg:npm/commander@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mz",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfcd4634eee79d830486b1a1f4b7b29a8138f98af45a7e4c70721930ae5c7d00a5f8d0d7d3cb0266051cf7fe8c1e78bd216b852e6d59dc74c25eedb3f5f37ad9"
        }
      ],
      "purl": "pkg:npm/mz@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mz@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "any-promise",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed4be629a95646dd708232f546b1b1a12256ff44191487a0a5e1af646f648e9f2fad1bb9e574c76f09eaab61a95e6f6e2db72e8719b722a5fd381e0c651d5bd8"
        }
      ],
      "purl": "pkg:npm/any-promise@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/any-promise@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thenify-all",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44dc501ffa88f3fb77b615c90f072cb543b8cdeaa8eb8f94cbffac355441c785e7d8e5fe399f683fe8899cd16aa6516b6b665455e28249ada85568b74f8b9598"
        }
      ],
      "purl": "pkg:npm/thenify-all@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thenify-all@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thenify",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "455652215e481b5d079377a7a2dae1bf3d13f5e9ba7321c12e41ff60066e2aa77c85190a8527c218870fd8a518d043f19ddcc034198d965cd63f06a4f9b85e4b"
        }
      ],
      "purl": "pkg:npm/thenify@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thenify@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-interface-checker",
      "version": "0.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63f6abbdb9feaebcf72422a5f42e2454d7d37d29b6fe6129e454b3e44b194803463d2950ae9448e4ce0f285fa6267139da338ef743e73d273752bddb4d0c3480"
        }
      ],
      "purl": "pkg:npm/ts-interface-checker@0.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ts-interface-checker/-/ts-interface-checker-0.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-interface-checker@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ts-interface-checker/-/ts-interface-checker-0.1.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-manifest-plugin",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "617500c31b5f2882482a4860d3730aba21400fbd8f96ba828b07703b85445dd44ee55d0e44237068ec0065ac0f65a9426e61fd9010e65e735e40ec3e048122a3"
        }
      ],
      "purl": "pkg:npm/webpack-manifest-plugin@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-manifest-plugin/-/webpack-manifest-plugin-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-manifest-plugin@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-manifest-plugin/-/webpack-manifest-plugin-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbd108f403b8d898c472b4c914e626572c1565d29551f3af0d43ec25e6b9188af524e106155ab0958d8ad3df1f1682233a40f31e7d808d1bccf1db0166efa008"
        }
      ],
      "purl": "pkg:npm/webpack-sources@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa743b81533118dc6c88be2512e2707bf4e8f149caedf02799b184107f11a4ba2eb8a6de126d2585b415148acd4ae07e1bbb55ac0955b198044d3e679637fe23"
        }
      ],
      "purl": "pkg:npm/source-list-map@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-webpack-plugin",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4d6486476a56e8654eba59aef1d5892322a132d604d1fb33ccfa48eb609cea37b8aead864172d04b212c9272386424a62e46b6543f48aa56265387cad2d3edc"
        }
      ],
      "purl": "pkg:npm/workbox-webpack-plugin@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-webpack-plugin/-/workbox-webpack-plugin-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-webpack-plugin@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-webpack-plugin/-/workbox-webpack-plugin-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "5.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "145c34dfd4e6ac1a852bc99affb38bdec0f3fd5cad76d26bd38e3f41426d1f4c0af656fd8cbabdb49c88c54c2d4091f06abd81aad880e220964b0a3d24b93316"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@5.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-5.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-5.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upath",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "699c06a5a9853bad60dce95f4fb390087aa11a75b8de2787f5665e3fb43137f1bf8d2e237ea524671a2bcaf26054f11cae5e4d2ff8201ec4a62cc1ee1fae0b86"
        }
      ],
      "purl": "pkg:npm/upath@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upath/-/upath-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upath@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upath/-/upath-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9604d2dd786fd6508e2a8ed20394e3297323a52338b018cd579faad9ba9eb1b48fb391631a653a8e3b414a45fd6f8a96f3bbc322c0889543ce1216d9acc76379"
        }
      ],
      "purl": "pkg:npm/webpack-sources@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-build",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e37fe801c0e4ee1b2670333d8d93f075dc5bb27a8d10f385bef9b79b6d5b1fafd88b9034a8ea3e8f493f2d113f47600e7c9a5457c25306a7258ef044c989775"
        }
      ],
      "purl": "pkg:npm/workbox-build@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-build/-/workbox-build-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-build@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-build/-/workbox-build-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@apideck",
      "name": "better-ajv-errors",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3fe6728012d9b64a74aaa380249557e285ffb05a39251dde056c30baa1c784ad0622040e296ac07e201a597d1a02b1e44561ccba080512001937154fc0f65868"
        }
      ],
      "purl": "pkg:npm/%40apideck/better-ajv-errors@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@apideck/better-ajv-errors/-/better-ajv-errors-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@apideck/better-ajv-errors@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@apideck/better-ajv-errors/-/better-ajv-errors-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7acf783379d321fb043e2b1169f6a4f870cb7c75e7281855def5397aa3dc4b77e5216a9cc495a05c75e27b2dd8ae968db1a9d8e5e8b55686046cece28eeabd04"
        }
      ],
      "purl": "pkg:npm/json-schema@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonpointer",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7f9d76e148472ede96517645b539f261a6c56d5b581de166b57e741cf582e24df0239f4df5d9e30a8a66dd210cee665f5a6bdc5419a4653fd4ff08913f762b5"
        }
      ],
      "purl": "pkg:npm/jsonpointer@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonpointer@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-babel",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5857dd2d653fc5558a7914272a62004142d423b225d206670481ff6453b4ebdc1821f3eefbcceb7e9fca316d1ab6610ba110eaf056e23f7542b2cf4c842baded"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-babel@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-babel/-/plugin-babel-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-babel@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-babel/-/plugin-babel-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-node-resolve",
      "version": "11.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9cda7e378dca95c86136b2a579fd80a6a1ccbd02b8d500ffc1797c93b400d30415fa5747b950cab03bc09d4349338dbeb3bb93f5a8ccec49c08c46f13d3a556"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-node-resolve@11.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-node-resolve/-/plugin-node-resolve-11.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-node-resolve@11.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-node-resolve/-/plugin-node-resolve-11.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce16820e271d2ee58de546cde4832716a34c84d7e8f75f6c1fce72dbf79afb9620f53b1391e671a4bf892dba7a7206054b8b112e9dd85784bac83baa5561d83b"
        }
      ],
      "purl": "pkg:npm/builtin-modules@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-replace",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20672ef9cc9d954319e449fce63c471f8aa3da1b5aff5d411eaf798871326f6b1b822374782773bd4707c3982df6904be654e2e090d827569c0a8306a53bc466"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-replace@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-replace/-/plugin-replace-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-replace@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-replace/-/plugin-replace-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "magic-string",
      "version": "0.25.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46617402c33382ddb9ab3aaa2dcd7e31b1e685dc74a2317616fb385e73aacf664e057cf3904c1cfdd250642607027eefd636d53a30197caf26b119f80713b855"
        }
      ],
      "purl": "pkg:npm/magic-string@0.25.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/magic-string/-/magic-string-0.25.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/magic-string@0.25.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/magic-string/-/magic-string-0.25.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@surma",
      "name": "rollup-plugin-off-main-thread",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "951f2affd5bb859a4c5b078d880294ecd41eac19f34102ef8bcaa74c353f7f122d3e1b5954c6cf57795b0b08e12253417bd05baf957e287b21bd6995486f5cc5"
        }
      ],
      "purl": "pkg:npm/%40surma/rollup-plugin-off-main-thread@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@surma/rollup-plugin-off-main-thread/-/rollup-plugin-off-main-thread-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@surma/rollup-plugin-off-main-thread@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@surma/rollup-plugin-off-main-thread/-/rollup-plugin-off-main-thread-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ejs",
      "version": "3.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51e26615f3ab0104bc38958f678aad807c961316b4f3cfccb4ae54132a091851faedc0c45e4652be23a2291099e178a3d33c48dc9102818b37a0ac7e022cd004"
        }
      ],
      "purl": "pkg:npm/ejs@3.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ejs@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/ejs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ejs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jake",
      "version": "10.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8fe124341eb2d0f9fc3a965a4b9ce68602f37666eebbefc48932b094c27b387cea06f5acab4e2664dd557cb023e455917c69bd3392c5694bc143639a5108d04"
        }
      ],
      "purl": "pkg:npm/jake@10.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jake/-/jake-10.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jake@10.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jake/-/jake-10.9.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/demo-app/node_modules/.bin/jake"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jake"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filelist",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c35704b9fdd2f83acb0902fb113ea4cfe82694975babd27bc970928cafce6423c0faa10dd56c85e1901fd186096b8fec84726b6b6b7f77fafc495e098bec7ef1"
        }
      ],
      "purl": "pkg:npm/filelist@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filelist@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "5.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee8d70100d91c8c3fb22eec635b6bdbdcd11596180089382641257d862568a9d22915fb070eb2056e63db84f023e2c908641854a586e4a464f6af37bbb573617"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@5.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@5.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "common-tags",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "824fd9f39d83d96b5bfffd08fa444534a284f5d208562ae3a2a3e8035c0953e5de3d55d97c6781a64e39f80d6b28ee10e37a6ba9604d63f32221e44b6cf59468"
        }
      ],
      "purl": "pkg:npm/common-tags@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/common-tags/-/common-tags-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/common-tags@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/common-tags/-/common-tags-1.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.8.0-beta.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db29a0ea8441a5e6de662f5450db2043cf5b871d354dc4e498d4c69cd3bcf2299399b4a0cb89dfba3ae054414a5a9313106035d440e44edee6a8e6d33dd8a020"
        }
      ],
      "purl": "pkg:npm/source-map@0.8.0-beta.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.8.0-beta.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.8.0-beta.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.8.0-beta.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "594bbb460d43ae833ba10bc659f3a200adb59fbe0683e4f87a55c441890e86dc8b7968891683862d73ca23ff60cc889ef42b7054b9bcc2dc3a60974acb14a37a"
        }
      ],
      "purl": "pkg:npm/whatwg-url@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.sortby",
      "version": "4.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c35971bc8ac327b40c91179bd9ef12ae12f3a14f8021951b7fddccd34a3bc65318d8081551418e3c5620c7c9f633f552280645b84cc19035aa71fa5dd153074"
        }
      ],
      "purl": "pkg:npm/lodash.sortby@4.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.sortby/-/lodash.sortby-4.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.sortby@4.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.sortby/-/lodash.sortby-4.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "753a68c048dc950eca831e5274192a473561111417a2ff3f97d16df5d54cf5f9a0d16d0a41255a5d7f53e22eadc023cdb58899339de5a5249403025b14f387c4"
        }
      ],
      "purl": "pkg:npm/tr46@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "610f819b1b9381de945d95b7f880867f2a91c875d5943e46b50af9faa8e2356edb17472aaf35f9d341d55cf04ebe05dbe589f30ddfa1d33ab2bfad4a503efe4a"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringify-object",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac7aa2161d5e96a090f563cb202f08d10fe0ff08f927578c932a220fa7a8400a561cfd05b652bbaea9e199a6cbe55518f4940272ac30be539a4aebad7a4832af"
        }
      ],
      "purl": "pkg:npm/stringify-object@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringify-object/-/stringify-object-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringify-object@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringify-object/-/stringify-object-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-own-enumerable-property-symbols",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23450157f5cecf55e42091c450331901bcc24e153f1fc0f19927e674670a3e7561bb655f16aaf7e23afdefbec8c9a4d8bf18de75686a5488a5103b0274fe46ea"
        }
      ],
      "purl": "pkg:npm/get-own-enumerable-property-symbols@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-own-enumerable-property-symbols/-/get-own-enumerable-property-symbols-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-own-enumerable-property-symbols@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-own-enumerable-property-symbols/-/get-own-enumerable-property-symbols-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784721e046a18de18dfef491d5acda8efad374ad5e4ccbbeae5b9fe7b8ee0ad5beafc391bc77f7261633fdb517c4b1d85936dd0815d66e2bf73656be0d6fe42"
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regexp",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef38c500f3b8fe0c324000204519aa7847b22080927660aa6b7b6c54731d0736975d18aaa2964be02ca0860fd7ba5196aed0014e96e7618cf32117df2e43f8a0"
        }
      ],
      "purl": "pkg:npm/is-regexp@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regexp/-/is-regexp-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regexp@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regexp/-/is-regexp-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "669acac7e6c12d7bf4ebb5930802eff124b3e65dbe5e1a580ac56d4aa94c9e40173160eafbf7a455b975821a8ff6b5074f3bfab26fc3c023a262eb54ff2a757f"
        }
      ],
      "purl": "pkg:npm/strip-comments@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-comments/-/strip-comments-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-comments/-/strip-comments-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tempy",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b5defb4c60f4ff27c0385f64a376d053a61665ae9d602afea16623a3c35e1109683a19b1ee4011ad8e5c7be712db615ff011cd03ec6e4ae2bc4a3ff71793c07"
        }
      ],
      "purl": "pkg:npm/tempy@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tempy/-/tempy-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tempy@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tempy/-/tempy-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "temp-dir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a80409e24269b0b5c2a9ffb073b07f02c73bfc38bef7ea9eefd628466f97bd0c9f644f01961eb42b541e7e95f543cdf1ab751cd7721fa283b2c7698d494ceae"
        }
      ],
      "purl": "pkg:npm/temp-dir@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/temp-dir/-/temp-dir-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/temp-dir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/temp-dir/-/temp-dir-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79a0731ba331373127f648b0bedadef7471768d2e499a74c59ad7340cb375ce4425cd6ec1ff39ec306f10b989af5d0b12319d302c4b15c969afe9e72f0396f26"
        }
      ],
      "purl": "pkg:npm/type-fest@0.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-string",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8d69e8ab10fbe96564a0cf0b0f1ad536cd5493ae7ffc2f9abf21ec59987d1e1fa480ef70a6000e54e06c0e453c50019b3de530172cda9e2e83cf34ee6065f5a"
        }
      ],
      "purl": "pkg:npm/unique-string@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-string@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-random-string",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf5a65203df2f6bfe53e1be2275c2b5e92dec94206019d921cd61311aa66efff00f672cfa32bd5a7744afc43c5aa7e641339f25a061936c46d6182166ee1bc28"
        }
      ],
      "purl": "pkg:npm/crypto-random-string@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-random-string@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "workbox-background-sync",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e47f865d80e2710bdbb6bf3b712ee3d3fd48e51fb9bf9d6450fcc8062f4bfc0491e865d54625dd7c29c93e6b47b9e7019776ac873bee08413934ebce60e0c53"
        }
      ],
      "purl": "pkg:npm/workbox-background-sync@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-background-sync/-/workbox-background-sync-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-background-sync@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-background-sync/-/workbox-background-sync-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "idb",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81c85eb16073caf18744ef56f2dcd45850f2728c398308ef14a7f257d145df663b179d3264ca7b98ff93da6248585c78f7389cab20b8b9e7c7335ee8eb128855"
        }
      ],
      "purl": "pkg:npm/idb@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/idb/-/idb-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/idb@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/idb/-/idb-7.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-core",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "183b45445ed88370c3f39f4f31b3c060f789ca0e602585ee050002fb0cab5aeb978297e83ab21022f15166743bf9ccd32108c8af50e12c4185cd96a7013ff76d"
        }
      ],
      "purl": "pkg:npm/workbox-core@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-core/-/workbox-core-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-core@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-core/-/workbox-core-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-broadcast-update",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e6fafe909ab205681ff2a2426643ff77a8827b9fbd8d202c48c10c1ee71b19895d9a23ddcc186c84cb33b30cf573e531c4af9ac2dc5252b0edf7e3a70877ae1"
        }
      ],
      "purl": "pkg:npm/workbox-broadcast-update@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-broadcast-update/-/workbox-broadcast-update-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-broadcast-update@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-broadcast-update/-/workbox-broadcast-update-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-cacheable-response",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25f849512403c2c1755efdc4575bd6cd2b023999f8990dfc6d61014772ddbcec523e007ae6000ce9c4b6097f2b92428746088bacded6c68caef93b87ebb907af"
        }
      ],
      "purl": "pkg:npm/workbox-cacheable-response@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-cacheable-response/-/workbox-cacheable-response-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-cacheable-response@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-cacheable-response/-/workbox-cacheable-response-6.6.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "workbox-background-sync@6.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-expiration",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6daa656177031db7bcbc0a3b198bf2026952e1febdf7c25f7f9d772f85ef97300ec5c97c17adb43bdd60ba827910e7f9a9e5c6e1c19d3591e491500fa2e142a7"
        }
      ],
      "purl": "pkg:npm/workbox-expiration@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-expiration/-/workbox-expiration-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-expiration@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-expiration/-/workbox-expiration-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-google-analytics",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a780c96ba3a575759de8cf73465d07eaf07d964ae6a98164450db112235d045a7d5342e1b063bb86c06c7151321fd1f6ff779966df1cf7b341d850fd536349f9"
        }
      ],
      "purl": "pkg:npm/workbox-google-analytics@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-google-analytics/-/workbox-google-analytics-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-google-analytics@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-google-analytics/-/workbox-google-analytics-6.6.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "It is not compatible with newer versions of GA starting with v4, as long as you are using GAv3 it should be ok, but the package is not longer being maintained"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-routing",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7c81d37b5430622c2d378b301945f53e58a5172676eab7a3c6f548745ee3d1cc93e96462ca71efc590e5fde5d58746938758b12af115f38d6d0ef8f39290abf"
        }
      ],
      "purl": "pkg:npm/workbox-routing@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-routing/-/workbox-routing-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-routing@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-routing/-/workbox-routing-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-strategies",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "782d3b5c6b883402945839d97883dd45d5636b8250b53b9cdf94d9f12c0c6f5ced8e9ec376ad82278caa2ef5b31561a5608ec21bf606a9a1139ed4f104674a81"
        }
      ],
      "purl": "pkg:npm/workbox-strategies@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-strategies/-/workbox-strategies-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-strategies@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-strategies/-/workbox-strategies-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-navigation-preload",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bad344586fae39f5dd6999af86c86b87b2b3843bbfd62307c90395e80aaea7c326efc0f6f3aba0bb993d3050fd4b3053e5373083048e455bc89da5d66ef2b3f5"
        }
      ],
      "purl": "pkg:npm/workbox-navigation-preload@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-navigation-preload/-/workbox-navigation-preload-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-navigation-preload@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-navigation-preload/-/workbox-navigation-preload-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-precaching",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "798bbfeccaad459375203b6d97f5107126459073fb767bebfd7dd59fa230e8eb0f32bb901e25638e898314236d77c93645d8cbb34c62cfd9eafaddd85417163f"
        }
      ],
      "purl": "pkg:npm/workbox-precaching@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-precaching/-/workbox-precaching-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-precaching@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-precaching/-/workbox-precaching-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-range-requests",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5776880b3e5f2c6ab90e9498114f0bc5e5efb13fff9915b32ab7c1388c7321d42757f5a3ed1f8bc895537338b8090e0dc0a84068155a4ae8c8d5c1235d6fa14f"
        }
      ],
      "purl": "pkg:npm/workbox-range-requests@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-range-requests/-/workbox-range-requests-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-range-requests@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-range-requests/-/workbox-range-requests-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-recipes",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c58b7913818c3bdede6d83bdf23d5a900bc4108f12527aa8d744ee28b84fc27b2a663f63bfc6a981fd91410506b32d33f120b510d1bf1a7a1d08bb1567f5ae8"
        }
      ],
      "purl": "pkg:npm/workbox-recipes@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-recipes/-/workbox-recipes-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-recipes@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-recipes/-/workbox-recipes-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-streams",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "adf3092d5bf0b840f4f429c7d519c87a9ecbf7e9a3e2e7e44f20cf55a5cf2a5862f7ed1ccc2bbe4898205822056cfa49680666a768b25462ea4b7454998ddfc6"
        }
      ],
      "purl": "pkg:npm/workbox-streams@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-streams/-/workbox-streams-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-streams@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-streams/-/workbox-streams-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-sw",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "476224c03a246ed1d41382aeb3ca4a3b9f9590f1c3da8a93825f97270878cdb1751f28c06e03662bf1677991d553ba74dd752df4809fb860d8212586f6a57f09"
        }
      ],
      "purl": "pkg:npm/workbox-sw@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-sw/-/workbox-sw-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-sw@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-sw/-/workbox-sw-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workbox-window",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f837dfaf91ad7b775ea079a2575d18c434b16576f916cbb2721b1125443d09bc1c6f14477c2ce86bfae5c271aaff37302620146ff4467e33e42be263a80484f"
        }
      ],
      "purl": "pkg:npm/workbox-window@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workbox-window/-/workbox-window-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workbox-window@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workbox-window/-/workbox-window-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "trusted-types",
      "version": "2.0.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49c68f767d5d41cce06e5d101537933a65471542eddfde17260390368c95859eabdaf2e730b25f04f779dd2079d93ff71b7e95235fe0d8c65a5f47300ee5ec7f"
        }
      ],
      "purl": "pkg:npm/%40types/trusted-types@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/trusted-types@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/trusted-types"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redux-devtools",
      "version": "3.5.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redux-devtools@3.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/redux-devtools@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "redux-devtools,createDevTools,redux-devtools/createDevTools"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/containers/DevTools.js",
            "line": 2
          },
          {
            "location": "demo-app/src/containers/DevTools.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redux-devtools-instrument",
      "version": "1.9.6",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redux-devtools-instrument@1.9.6",
      "type": "library",
      "bom-ref": "pkg:npm/redux-devtools-instrument@1.9.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redux-devtools-dock-monitor",
      "version": "1.1.3",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redux-devtools-dock-monitor@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/redux-devtools-dock-monitor@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "redux-devtools-dock-monitor"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/containers/DevTools.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-runtime",
      "version": "6.26.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.26.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-runtime@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.6.5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@2.6.5",
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.11.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.11.1",
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-key",
      "version": "0.2.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-key@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/parse-key@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dock",
      "version": "0.2.4",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-dock@0.2.4",
      "type": "framework",
      "bom-ref": "pkg:npm/react-dock@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "lodash.debounce",
      "version": "3.1.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.debounce@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.debounce@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._getnative",
      "version": "3.9.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash._getnative@3.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/lodash._getnative@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "react-pure-render",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-pure-render@1.0.2",
      "type": "framework",
      "bom-ref": "pkg:npm/react-pure-render@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "redux-devtools-log-monitor",
      "version": "1.4.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redux-devtools-log-monitor@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/redux-devtools-log-monitor@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "redux-devtools-log-monitor"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo-app/src/containers/DevTools.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-json-tree",
      "version": "0.11.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-json-tree@0.11.2",
      "type": "framework",
      "bom-ref": "pkg:npm/react-json-tree@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-base16-styling",
      "version": "0.5.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-base16-styling@0.5.3",
      "type": "framework",
      "bom-ref": "pkg:npm/react-base16-styling@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "base16",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base16@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/base16@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.curry",
      "version": "4.1.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.curry@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.curry@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.flow",
      "version": "3.5.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.flow@3.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flow@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pure-color",
      "version": "1.3.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pure-color@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/pure-color@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redux-devtools-themes",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redux-devtools-themes@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/redux-devtools-themes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo-app/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo-app/package-lock.json"
              }
            ],
            "concludedValue": "demo-app/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/heap@0.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setimmediate@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@2.80.0",
      "dependsOn": [
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/fsevents@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@0.0.39",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estree-walker@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/pluginutils@3.1.0",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.39",
        "pkg:npm/estree-walker@1.0.1",
        "pkg:npm/picomatch@2.3.2",
        "pkg:npm/rollup@2.80.0"
      ]
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estree-walker@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.13",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.5",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.6",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-reference@1.2.1",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.39"
      ]
    },
    {
      "ref": "pkg:npm/sourcemap-codec@1.4.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/magic-string@0.25.7",
      "dependsOn": [
        "pkg:npm/sourcemap-codec@1.4.8"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.8.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.20.0",
      "dependsOn": [
        "pkg:npm/is-core-module@2.8.0",
        "pkg:npm/path-parse@1.0.7"
      ]
    },
    {
      "ref": "pkg:npm/@rollup/plugin-commonjs@19.0.0",
      "dependsOn": [
        "pkg:npm/@rollup/pluginutils@3.1.0",
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/estree-walker@2.0.2",
        "pkg:npm/glob@7.1.6",
        "pkg:npm/is-reference@1.2.1",
        "pkg:npm/magic-string@0.25.7",
        "pkg:npm/resolve@1.20.0",
        "pkg:npm/rollup@2.80.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@15.12.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/resolve@1.17.1",
      "dependsOn": [
        "pkg:npm/@types/node@15.12.5",
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/builtin-modules@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deepmerge@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/plugin-node-resolve@13.0.0",
      "dependsOn": [
        "pkg:npm/@rollup/pluginutils@3.1.0",
        "pkg:npm/@types/resolve@1.17.1",
        "pkg:npm/builtin-modules@3.2.0",
        "pkg:npm/deepmerge@4.2.2",
        "pkg:npm/is-module@1.0.0",
        "pkg:npm/resolve@1.20.0",
        "pkg:npm/rollup@2.80.0"
      ]
    },
    {
      "ref": "pkg:npm/cached-path-relative@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-string-parser@7.25.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.25.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/types@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/helper-string-parser@7.25.9",
        "pkg:npm/@babel/helper-validator-identifier@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/parser@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@jsdoc/salty@0.2.9",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/linkify-it@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/mdurl@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/markdown-it@14.1.2",
      "dependsOn": [
        "pkg:npm/@types/linkify-it@5.0.0",
        "pkg:npm/@types/mdurl@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bluebird@3.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/catharsis@0.9.0",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlcreate@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js2xmlparser@4.0.2",
      "dependsOn": [
        "pkg:npm/xmlcreate@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/klaw@3.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/argparse@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uc.micro@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/linkify-it@5.0.0",
      "dependsOn": [
        "pkg:npm/uc.micro@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mdurl@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode.js@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/markdown-it@14.1.1",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1",
        "pkg:npm/entities@4.5.0",
        "pkg:npm/linkify-it@5.0.0",
        "pkg:npm/mdurl@2.0.0",
        "pkg:npm/punycode.js@2.3.1",
        "pkg:npm/uc.micro@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/markdown-it-anchor@8.6.7",
      "dependsOn": [
        "pkg:npm/@types/markdown-it@14.1.2",
        "pkg:npm/markdown-it@14.1.1"
      ]
    },
    {
      "ref": "pkg:npm/marked@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requizzle@0.2.3",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.13.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdoc@4.0.4",
      "dependsOn": [
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@jsdoc/salty@0.2.9",
        "pkg:npm/@types/markdown-it@14.1.2",
        "pkg:npm/bluebird@3.7.2",
        "pkg:npm/catharsis@0.9.0",
        "pkg:npm/escape-string-regexp@2.0.0",
        "pkg:npm/js2xmlparser@4.0.2",
        "pkg:npm/klaw@3.0.0",
        "pkg:npm/markdown-it-anchor@8.6.7",
        "pkg:npm/markdown-it@14.1.1",
        "pkg:npm/marked@4.3.0",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/requizzle@0.2.3",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/underscore@1.13.8"
      ]
    },
    {
      "ref": "pkg:npm/array-back@6.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-replace@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.camelcase@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typical@7.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/command-line-args@6.0.1",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/find-replace@5.0.2",
        "pkg:npm/lodash.camelcase@4.3.0",
        "pkg:npm/typical@7.3.0"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@4.1.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk-template@0.4.0",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2"
      ]
    },
    {
      "ref": "pkg:npm/wordwrapjs@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/table-layout@4.1.1",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/wordwrapjs@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/command-line-usage@7.0.3",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/chalk-template@0.4.0",
        "pkg:npm/table-layout@4.1.1",
        "pkg:npm/typical@7.3.0"
      ]
    },
    {
      "ref": "pkg:npm/walk-back@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/config-master@3.1.0",
      "dependsOn": [
        "pkg:npm/walk-back@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cache-point@3.0.1",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2"
      ]
    },
    {
      "ref": "pkg:npm/common-sequence@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/queue-microtask@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-parallel@1.2.0",
      "dependsOn": [
        "pkg:npm/queue-microtask@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/run-parallel@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/reusify@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastq@1.19.1",
      "dependsOn": [
        "pkg:npm/reusify@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.scandir@2.1.5",
        "pkg:npm/fastq@1.19.1"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.3",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/merge2@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@7.1.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.3",
      "dependsOn": [
        "pkg:npm/fill-range@7.1.1"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@4.0.8",
      "dependsOn": [
        "pkg:npm/braces@3.0.3",
        "pkg:npm/picomatch@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-glob@3.3.3",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/@nodelib/fs.walk@1.2.8",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/micromatch@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/file-set@5.2.2",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/fast-glob@3.3.3"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/neo-async@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@3.12.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/handlebars@4.7.9",
      "dependsOn": [
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/uglify-js@3.12.3",
        "pkg:npm/wordwrap@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/walk-back@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dmd@7.1.1",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/cache-point@3.0.1",
        "pkg:npm/common-sequence@3.0.0",
        "pkg:npm/file-set@5.2.2",
        "pkg:npm/handlebars@4.7.9",
        "pkg:npm/marked@4.3.0",
        "pkg:npm/walk-back@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/current-module-paths@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-to-spawn-args@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdoc-api@9.3.4",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/cache-point@3.0.1",
        "pkg:npm/current-module-paths@1.1.2",
        "pkg:npm/file-set@5.2.2",
        "pkg:npm/jsdoc@4.0.4",
        "pkg:npm/object-to-spawn-args@2.0.1",
        "pkg:npm/walk-back@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.omit@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sort-array@5.0.0",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/typical@7.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsdoc-parse@6.2.4",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/find-replace@5.0.2",
        "pkg:npm/lodash.omit@4.5.0",
        "pkg:npm/sort-array@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsdoc-to-markdown@9.1.1",
      "dependsOn": [
        "pkg:npm/array-back@6.2.2",
        "pkg:npm/command-line-args@6.0.1",
        "pkg:npm/command-line-usage@7.0.3",
        "pkg:npm/config-master@3.1.0",
        "pkg:npm/dmd@7.1.1",
        "pkg:npm/jsdoc-api@9.3.4",
        "pkg:npm/jsdoc-parse@6.2.4",
        "pkg:npm/walk-back@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdirp@4.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chokidar@4.0.3",
      "dependsOn": [
        "pkg:npm/readdirp@4.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.4.0",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/diff@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yocto-queue@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@3.1.0",
      "dependsOn": [
        "pkg:npm/yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@5.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@6.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@5.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@6.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.6",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/signal-exit@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/foreground-child@3.3.1",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/signal-exit@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/eastasianwidth@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@9.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@7.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@6.1.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@5.1.2",
      "dependsOn": [
        "pkg:npm/eastasianwidth@0.2.0",
        "pkg:npm/emoji-regex@9.2.2",
        "pkg:npm/strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@4.2.3",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@6.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@8.1.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@6.2.1",
        "pkg:npm/string-width@5.1.2",
        "pkg:npm/strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/string-width@5.1.2",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/strip-ansi@7.1.0",
        "pkg:npm/wrap-ansi@7.0.0",
        "pkg:npm/wrap-ansi@8.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jackspeak@3.4.3",
      "dependsOn": [
        "pkg:npm/@isaacs/cliui@8.0.2",
        "pkg:npm/@pkgjs/parseargs@0.11.0"
      ]
    },
    {
      "ref": "pkg:npm/brace-expansion@2.0.3",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@9.0.9",
      "dependsOn": [
        "pkg:npm/brace-expansion@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/minipass@7.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/package-json-from-dist@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@10.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-scurry@1.11.1",
      "dependsOn": [
        "pkg:npm/lru-cache@10.4.3",
        "pkg:npm/minipass@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/glob@10.5.0",
      "dependsOn": [
        "pkg:npm/foreground-child@3.3.1",
        "pkg:npm/jackspeak@3.4.3",
        "pkg:npm/minimatch@9.0.9",
        "pkg:npm/minipass@7.1.2",
        "pkg:npm/package-json-from-dist@1.0.1",
        "pkg:npm/path-scurry@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/he@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@4.1.1",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-unicode-supported@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-symbols@4.1.0",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/is-unicode-supported@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/picocolors@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.1.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/safe-buffer@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/serialize-javascript@6.0.2",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@8.1.1",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/workerpool@9.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@8.0.1",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/escalade@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@5.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@21.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@17.7.2",
      "dependsOn": [
        "pkg:npm/cliui@8.0.1",
        "pkg:npm/escalade@3.2.0",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@21.1.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flat@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-obj@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-unparser@2.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/decamelize@4.0.0",
        "pkg:npm/flat@5.0.2",
        "pkg:npm/is-plain-obj@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mocha@11.7.5",
      "dependsOn": [
        "pkg:npm/browser-stdout@1.3.1",
        "pkg:npm/chokidar@4.0.3",
        "pkg:npm/debug@4.4.0",
        "pkg:npm/diff@7.0.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/glob@10.5.0",
        "pkg:npm/he@1.2.0",
        "pkg:npm/is-path-inside@3.0.3",
        "pkg:npm/js-yaml@4.1.1",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/minimatch@9.0.9",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/serialize-javascript@6.0.2",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/workerpool@9.3.4",
        "pkg:npm/yargs-parser@21.1.1",
        "pkg:npm/yargs-unparser@2.0.0",
        "pkg:npm/yargs@17.7.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.14.5",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.14.5",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.14.5",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.14.5"
      ]
    },
    {
      "ref": "pkg:npm/merge-stream@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-worker@26.6.2",
      "dependsOn": [
        "pkg:npm/@types/node@15.12.5",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/serialize-javascript@4.0.0",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.14",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.0",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
        "pkg:npm/@jridgewell/trace-mapping@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/source-map@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.2",
        "pkg:npm/@jridgewell/trace-mapping@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/acorn@8.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.21",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/buffer-from@1.1.2",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/terser@5.14.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/source-map@0.3.2",
        "pkg:npm/acorn@8.7.1",
        "pkg:npm/commander@2.20.3",
        "pkg:npm/source-map-support@0.5.21"
      ]
    },
    {
      "ref": "pkg:npm/rollup-plugin-terser@7.0.2",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.14.5",
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/jest-worker@26.6.2",
        "pkg:npm/rollup@2.80.0",
        "pkg:npm/serialize-javascript@4.0.0",
        "pkg:npm/terser@5.14.2",
        "pkg:npm/terser@5.39.0"
      ]
    },
    {
      "ref": "pkg:npm/fuzzball@2.2.6",
      "dependsOn": [
        "pkg:npm/@rollup/plugin-commonjs@19.0.0",
        "pkg:npm/@rollup/plugin-node-resolve@13.0.0",
        "pkg:npm/cached-path-relative@1.1.0",
        "pkg:npm/heap@0.2.6",
        "pkg:npm/jsdoc-to-markdown@9.1.1",
        "pkg:npm/jsdoc@4.0.4",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/mocha@11.7.5",
        "pkg:npm/rollup-plugin-terser@7.0.2",
        "pkg:npm/rollup@2.80.0",
        "pkg:npm/setimmediate@1.0.5",
        "pkg:npm/uglify-js@3.12.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/json-schema@7.0.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/eslint@8.56.12",
      "dependsOn": [
        "pkg:npm/@types/estree@1.0.8",
        "pkg:npm/@types/json-schema@7.0.15"
      ]
    },
    {
      "ref": "pkg:npm/@types/eslint-scope@3.7.7",
      "dependsOn": [
        "pkg:npm/@types/eslint@8.56.12",
        "pkg:npm/@types/estree@1.0.8"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-api-error@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/long@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-numbers@1.13.2",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.13.2",
        "pkg:npm/@webassemblyjs/helper-api-error@1.13.2",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ast@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/helper-numbers@1.13.2",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-buffer@1.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ieee754@1.13.2",
      "dependsOn": [
        "pkg:npm/@xtuc/ieee754@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/leb128@1.13.2",
      "dependsOn": [
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/utf8@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-gen@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2",
        "pkg:npm/@webassemblyjs/ieee754@1.13.2",
        "pkg:npm/@webassemblyjs/leb128@1.13.2",
        "pkg:npm/@webassemblyjs/utf8@1.13.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.14.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2",
        "pkg:npm/@webassemblyjs/wasm-gen@1.14.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-parser@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@webassemblyjs/helper-api-error@1.13.2",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2",
        "pkg:npm/@webassemblyjs/ieee754@1.13.2",
        "pkg:npm/@webassemblyjs/leb128@1.13.2",
        "pkg:npm/@webassemblyjs/utf8@1.13.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-opt@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.14.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wast-printer@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-edit@1.14.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.14.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.13.2",
        "pkg:npm/@webassemblyjs/helper-wasm-section@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-opt@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.14.1",
        "pkg:npm/@webassemblyjs/wast-printer@1.14.1"
      ]
    },
    {
      "ref": "pkg:npm/acorn@8.15.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-import-phases@1.0.4",
      "dependsOn": [
        "pkg:npm/acorn@8.15.0"
      ]
    },
    {
      "ref": "pkg:npm/baseline-browser-mapping@2.9.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001769",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.5.286",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-releases@2.0.27",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/update-browserslist-db@1.2.3",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/escalade@3.2.0",
        "pkg:npm/picocolors@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/browserslist@4.28.1",
      "dependsOn": [
        "pkg:npm/baseline-browser-mapping@2.9.19",
        "pkg:npm/caniuse-lite@1.0.30001769",
        "pkg:npm/electron-to-chromium@1.5.286",
        "pkg:npm/node-releases@2.0.27",
        "pkg:npm/update-browserslist-db@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/chrome-trace-event@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tapable@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@5.19.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/tapable@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/es-module-lexer@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@4.3.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-scope@5.1.1",
      "dependsOn": [
        "pkg:npm/esrecurse@4.3.0",
        "pkg:npm/estraverse@4.3.0"
      ]
    },
    {
      "ref": "pkg:npm/events@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-to-regexp@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-runner@4.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-uri@3.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-from-string@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@8.18.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-uri@3.0.6",
        "pkg:npm/json-schema-traverse@1.0.0",
        "pkg:npm/require-from-string@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/ajv-formats@2.1.1",
      "dependsOn": [
        "pkg:npm/ajv@8.18.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv-keywords@5.1.0",
      "dependsOn": [
        "pkg:npm/ajv@8.18.0",
        "pkg:npm/fast-deep-equal@3.1.3"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@4.3.3",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/ajv-formats@2.1.1",
        "pkg:npm/ajv-keywords@5.1.0",
        "pkg:npm/ajv@8.18.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.25",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.0",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14"
      ]
    },
    {
      "ref": "pkg:npm/undici-types@6.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@22.13.10",
      "dependsOn": [
        "pkg:npm/undici-types@6.20.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-worker@27.5.1",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/supports-color@8.1.1"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@4.3.0",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/ajv-formats@2.1.1",
        "pkg:npm/ajv-keywords@5.1.0",
        "pkg:npm/ajv@8.18.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.8",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.2.1",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
        "pkg:npm/@jridgewell/trace-mapping@0.3.25"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/source-map@0.3.6",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.8",
        "pkg:npm/@jridgewell/trace-mapping@0.3.25"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/terser@5.39.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/source-map@0.3.6",
        "pkg:npm/acorn@8.15.0",
        "pkg:npm/commander@2.20.0",
        "pkg:npm/source-map-support@0.5.21"
      ]
    },
    {
      "ref": "pkg:npm/terser-webpack-plugin@5.4.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.25",
        "pkg:npm/jest-worker@27.5.1",
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/terser@5.39.0",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/watchpack@2.5.1",
      "dependsOn": [
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.11"
      ]
    },
    {
      "ref": "pkg:npm/webpack-sources@3.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack@5.105.0",
      "dependsOn": [
        "pkg:npm/@types/eslint-scope@3.7.7",
        "pkg:npm/@types/estree@1.0.8",
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/@webassemblyjs/ast@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-edit@1.14.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.14.1",
        "pkg:npm/acorn-import-phases@1.0.4",
        "pkg:npm/acorn@8.15.0",
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/chrome-trace-event@1.0.3",
        "pkg:npm/enhanced-resolve@5.19.0",
        "pkg:npm/es-module-lexer@2.0.0",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/events@3.3.0",
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/loader-runner@4.3.1",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/schema-utils@4.3.3",
        "pkg:npm/tapable@2.3.0",
        "pkg:npm/terser-webpack-plugin@5.4.0",
        "pkg:npm/watchpack@2.5.1",
        "pkg:npm/webpack-sources@3.3.3"
      ]
    },
    {
      "ref": "pkg:npm/big.js@5.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emojis-list@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-utils@2.0.4",
      "dependsOn": [
        "pkg:npm/big.js@5.2.2",
        "pkg:npm/emojis-list@3.0.0",
        "pkg:npm/json5@2.2.3"
      ]
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.14.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv-keywords@3.5.2",
      "dependsOn": [
        "pkg:npm/ajv@6.14.0"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@3.1.1",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.14.0"
      ]
    },
    {
      "ref": "pkg:npm/file-loader@6.2.0",
      "dependsOn": [
        "pkg:npm/loader-utils@2.0.4",
        "pkg:npm/schema-utils@3.1.1",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/fuzzball@2.2.0",
      "dependsOn": [
        "pkg:npm/heap@0.2.6",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/setimmediate@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/loose-envify@1.4.0",
      "dependsOn": [
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-is@16.13.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prop-types@15.8.1",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react-is@16.13.1"
      ]
    },
    {
      "ref": "pkg:npm/react@16.14.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.8.1"
      ]
    },
    {
      "ref": "pkg:npm/scheduler@0.19.1",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@16.14.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react@16.14.0",
        "pkg:npm/scheduler@0.19.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash-es@4.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/symbol-observable@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/redux@3.7.2",
      "dependsOn": [
        "pkg:npm/lodash-es@4.18.1",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/symbol-observable@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/create-react-class@15.7.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/hoist-non-react-statics@3.3.2",
      "dependsOn": [
        "pkg:npm/react-is@16.13.1"
      ]
    },
    {
      "ref": "pkg:npm/invariant@2.2.4",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/react-redux@4.4.10",
      "dependsOn": [
        "pkg:npm/create-react-class@15.7.0",
        "pkg:npm/hoist-non-react-statics@3.3.2",
        "pkg:npm/invariant@2.2.4",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react@16.14.0",
        "pkg:npm/redux@3.7.2"
      ]
    },
    {
      "ref": "pkg:npm/strict-uri-encode@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/query-string@4.3.4",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/strict-uri-encode@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/warning@3.0.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/history@3.3.0",
      "dependsOn": [
        "pkg:npm/invariant@2.2.4",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/query-string@4.3.4",
        "pkg:npm/warning@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/react-router@3.2.6",
      "dependsOn": [
        "pkg:npm/create-react-class@15.7.0",
        "pkg:npm/history@3.3.0",
        "pkg:npm/hoist-non-react-statics@3.3.2",
        "pkg:npm/invariant@2.2.4",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-is@16.13.1",
        "pkg:npm/react@16.14.0",
        "pkg:npm/warning@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/react-router-redux@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/immutable@5.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-js@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-addon-api@7.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-android-arm64@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-darwin-arm64@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-darwin-x64@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-freebsd-x64@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-linux-arm-glibc@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-linux-arm-musl@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-linux-arm64-glibc@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-linux-arm64-musl@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-linux-x64-glibc@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-linux-x64-musl@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-win32-arm64@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-win32-ia32@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher-win32-x64@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@parcel/watcher@2.5.1",
      "dependsOn": [
        "pkg:npm/@parcel/watcher-android-arm64@2.5.1",
        "pkg:npm/@parcel/watcher-darwin-arm64@2.5.1",
        "pkg:npm/@parcel/watcher-darwin-x64@2.5.1",
        "pkg:npm/@parcel/watcher-freebsd-x64@2.5.1",
        "pkg:npm/@parcel/watcher-linux-arm-glibc@2.5.1",
        "pkg:npm/@parcel/watcher-linux-arm-musl@2.5.1",
        "pkg:npm/@parcel/watcher-linux-arm64-glibc@2.5.1",
        "pkg:npm/@parcel/watcher-linux-arm64-musl@2.5.1",
        "pkg:npm/@parcel/watcher-linux-x64-glibc@2.5.1",
        "pkg:npm/@parcel/watcher-linux-x64-musl@2.5.1",
        "pkg:npm/@parcel/watcher-win32-arm64@2.5.1",
        "pkg:npm/@parcel/watcher-win32-ia32@2.5.1",
        "pkg:npm/@parcel/watcher-win32-x64@2.5.1",
        "pkg:npm/detect-libc@1.0.3",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/node-addon-api@7.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sass@1.86.0",
      "dependsOn": [
        "pkg:npm/@parcel/watcher@2.5.1",
        "pkg:npm/chokidar@4.0.3",
        "pkg:npm/immutable@5.1.5",
        "pkg:npm/source-map-js@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/async@3.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/email-addresses@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-outer@1.0.1",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/trim-repeated@1.0.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/filenamify@4.3.0",
      "dependsOn": [
        "pkg:npm/filename-reserved-regex@2.0.0",
        "pkg:npm/strip-outer@1.0.1",
        "pkg:npm/trim-repeated@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@6.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@3.1.0",
      "dependsOn": [
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/p-try@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.3.0",
      "dependsOn": [
        "pkg:npm/p-try@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@4.1.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@5.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@4.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@5.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@4.2.0",
      "dependsOn": [
        "pkg:npm/find-up@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-cache-dir@3.3.2",
      "dependsOn": [
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/pkg-dir@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@4.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@8.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@1.0.2",
      "dependsOn": [
        "pkg:npm/array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/globby@6.1.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/glob@7.1.3",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gh-pages@5.0.0",
      "dependsOn": [
        "pkg:npm/async@3.2.6",
        "pkg:npm/commander@2.20.0",
        "pkg:npm/email-addresses@5.0.0",
        "pkg:npm/filenamify@4.3.0",
        "pkg:npm/find-cache-dir@3.3.2",
        "pkg:npm/fs-extra@8.1.0",
        "pkg:npm/globby@6.1.0"
      ]
    },
    {
      "ref": "pkg:npm/typescript@4.9.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.26.2",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.25.9",
        "pkg:npm/js-tokens@4.0.0",
        "pkg:npm/picocolors@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/generator@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/@jridgewell/gen-mapping@0.3.8",
        "pkg:npm/@jridgewell/trace-mapping@0.3.25",
        "pkg:npm/jsesc@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/compat-data@7.26.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-option@7.25.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@5.1.1",
      "dependsOn": [
        "pkg:npm/yallist@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-compilation-targets@7.26.5",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.26.8",
        "pkg:npm/@babel/helper-validator-option@7.25.9",
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/lru-cache@5.1.1",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/template@7.26.9",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.3.3",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/globals@11.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/traverse@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/@babel/generator@7.26.10",
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@babel/template@7.26.9",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/globals@11.12.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-module-imports@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-module-transforms@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-imports@7.25.9",
        "pkg:npm/@babel/helper-validator-identifier@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helpers@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/template@7.26.9",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@1.8.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/gensync@1.0.0-beta.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/core@7.16.5",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/@babel/generator@7.26.10",
        "pkg:npm/@babel/helper-compilation-targets@7.26.5",
        "pkg:npm/@babel/helper-module-transforms@7.26.0",
        "pkg:npm/@babel/helpers@7.26.10",
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@babel/template@7.26.9",
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/gensync@1.0.0-beta.2",
        "pkg:npm/json5@2.2.3",
        "pkg:npm/semver@6.3.1",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/react-refresh@0.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.21.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/bonjour@3.5.13",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/qs@6.9.18",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/range-parser@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/mime@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/send@0.17.4",
      "dependsOn": [
        "pkg:npm/@types/mime@1.3.5",
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/express-serve-static-core@5.0.6",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/@types/qs@6.9.18",
        "pkg:npm/@types/range-parser@1.2.7",
        "pkg:npm/@types/send@0.17.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/connect-history-api-fallback@1.5.4",
      "dependsOn": [
        "pkg:npm/@types/express-serve-static-core@5.0.6",
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/connect@3.4.38",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/body-parser@1.19.5",
      "dependsOn": [
        "pkg:npm/@types/connect@3.4.38",
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/express-serve-static-core@4.19.6",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/@types/qs@6.9.18",
        "pkg:npm/@types/range-parser@1.2.7",
        "pkg:npm/@types/send@0.17.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/http-errors@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/serve-static@1.15.7",
      "dependsOn": [
        "pkg:npm/@types/http-errors@2.0.4",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/@types/send@0.17.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/express@4.17.21",
      "dependsOn": [
        "pkg:npm/@types/body-parser@1.19.5",
        "pkg:npm/@types/express-serve-static-core@4.19.6",
        "pkg:npm/@types/qs@6.9.18",
        "pkg:npm/@types/serve-static@1.15.7"
      ]
    },
    {
      "ref": "pkg:npm/@types/serve-index@1.9.4",
      "dependsOn": [
        "pkg:npm/@types/express@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@types/sockjs@0.3.36",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/ws@8.18.0",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/ansi-html-community@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@leichtgewicht/ip-codec@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-packet@5.6.1",
      "dependsOn": [
        "pkg:npm/@leichtgewicht/ip-codec@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/thunky@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/multicast-dns@7.2.5",
      "dependsOn": [
        "pkg:npm/dns-packet@5.6.1",
        "pkg:npm/thunky@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bonjour-service@1.3.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/multicast-dns@7.2.5"
      ]
    },
    {
      "ref": "pkg:npm/normalize-path@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/anymatch@3.1.3",
      "dependsOn": [
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/picomatch@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@2.1.0",
      "dependsOn": [
        "pkg:npm/binary-extensions@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@3.6.0",
      "dependsOn": [
        "pkg:npm/picomatch@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@2.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chokidar@3.6.0",
      "dependsOn": [
        "pkg:npm/anymatch@3.1.3",
        "pkg:npm/braces@3.0.3",
        "pkg:npm/fsevents@2.3.3",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/is-binary-path@2.1.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/readdirp@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/colorette@2.0.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compressible@2.0.18",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-headers@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.8.1",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/compressible@2.0.18",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/negotiator@0.6.4",
        "pkg:npm/on-headers@1.1.0",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/connect-history-api-fallback@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stream@6.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/human-signals@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@4.0.1",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@5.1.2",
      "dependsOn": [
        "pkg:npm/mimic-fn@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-final-newline@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@5.1.1",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/get-stream@6.0.1",
        "pkg:npm/human-signals@2.1.0",
        "pkg:npm/is-stream@2.0.1",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/npm-run-path@4.0.1",
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/strip-final-newline@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/default-gateway@6.0.3",
      "dependsOn": [
        "pkg:npm/execa@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.8",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/negotiator@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.1",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.2",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.24",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.4.1",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es-errors@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-inspect@1.13.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel-list@1.0.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/function-bind@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/es-define-property@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-object-atoms@1.1.1",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/gopd@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dunder-proto@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/gopd@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/get-proto@1.0.1",
      "dependsOn": [
        "pkg:npm/dunder-proto@1.0.1",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hasown@2.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/math-intrinsics@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.3.0",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/function-bind@1.1.2",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/math-intrinsics@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/call-bound@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/side-channel-map@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/side-channel-map@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/side-channel@1.1.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/side-channel-list@1.0.0",
        "pkg:npm/side-channel-map@1.0.1",
        "pkg:npm/side-channel-weakmap@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.14.2",
      "dependsOn": [
        "pkg:npm/side-channel@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.5.3",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.18",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.20.4",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/qs@6.14.2",
        "pkg:npm/raw-body@2.5.3",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.4",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.3.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.0",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.7",
      "dependsOn": [
        "pkg:npm/forwarded@0.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.19.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.16.2",
      "dependsOn": [
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@0.19.0"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.22.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.8",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/body-parser@1.20.4",
        "pkg:npm/content-disposition@0.5.4",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.7.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@1.3.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/merge-descriptors@1.0.3",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/path-to-regexp@0.1.13",
        "pkg:npm/proxy-addr@2.0.7",
        "pkg:npm/qs@6.14.2",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/send@0.19.0",
        "pkg:npm/serve-static@1.16.2",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/utils-merge@1.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/html-entities@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/http-proxy@1.17.16",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/eventemitter3@4.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/follow-redirects@1.15.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requires-port@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy@1.18.1",
      "dependsOn": [
        "pkg:npm/eventemitter3@4.0.7",
        "pkg:npm/follow-redirects@1.15.9",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-plain-obj@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy-middleware@2.0.9",
      "dependsOn": [
        "pkg:npm/@types/express@4.17.21",
        "pkg:npm/@types/http-proxy@1.17.16",
        "pkg:npm/http-proxy@1.18.1",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/is-plain-obj@3.0.0",
        "pkg:npm/micromatch@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/ipaddr.js@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shell-quote@1.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/launch-editor@2.10.0",
      "dependsOn": [
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/shell-quote@1.8.2"
      ]
    },
    {
      "ref": "pkg:npm/define-lazy-prop@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-docker@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-wsl@2.2.0",
      "dependsOn": [
        "pkg:npm/is-docker@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/open@8.4.2",
      "dependsOn": [
        "pkg:npm/define-lazy-prop@2.0.0",
        "pkg:npm/is-docker@2.2.1",
        "pkg:npm/is-wsl@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/retry@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/retry@0.13.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-retry@4.6.2",
      "dependsOn": [
        "pkg:npm/@types/retry@0.12.0",
        "pkg:npm/retry@0.13.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@3.0.2",
      "dependsOn": [
        "pkg:npm/glob@7.1.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/node-forge@1.3.11",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/node-forge@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/selfsigned@2.4.1",
      "dependsOn": [
        "pkg:npm/@types/node-forge@1.3.11",
        "pkg:npm/node-forge@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.3",
      "dependsOn": [
        "pkg:npm/depd@1.1.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.1.0",
        "pkg:npm/statuses@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-index@1.9.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.8",
        "pkg:npm/batch@0.6.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.6.3",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/parseurl@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/http-parser-js@0.5.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-extensions@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-driver@0.7.4",
      "dependsOn": [
        "pkg:npm/http-parser-js@0.5.9",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/websocket-extensions@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.11.4",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.7.4"
      ]
    },
    {
      "ref": "pkg:npm/uuid@8.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sockjs@0.3.24",
      "dependsOn": [
        "pkg:npm/faye-websocket@0.11.4",
        "pkg:npm/uuid@8.3.2",
        "pkg:npm/websocket-driver@0.7.4"
      ]
    },
    {
      "ref": "pkg:npm/handle-thing@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-deceiver@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/select-hose@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-node@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/obuf@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.8",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minimalistic-assert@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wbuf@1.7.3",
      "dependsOn": [
        "pkg:npm/minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/hpack.js@2.1.6",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/obuf@1.1.2",
        "pkg:npm/readable-stream@2.3.8",
        "pkg:npm/wbuf@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/spdy-transport@3.0.0",
      "dependsOn": [
        "pkg:npm/debug@4.3.3",
        "pkg:npm/detect-node@2.1.0",
        "pkg:npm/hpack.js@2.1.6",
        "pkg:npm/obuf@1.1.2",
        "pkg:npm/readable-stream@3.6.2",
        "pkg:npm/wbuf@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/spdy@4.0.2",
      "dependsOn": [
        "pkg:npm/debug@4.3.3",
        "pkg:npm/handle-thing@2.0.1",
        "pkg:npm/http-deceiver@1.2.7",
        "pkg:npm/select-hose@2.0.0",
        "pkg:npm/spdy-transport@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-monkey@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/memfs@3.5.3",
      "dependsOn": [
        "pkg:npm/fs-monkey@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/webpack-dev-middleware@5.3.4",
      "dependsOn": [
        "pkg:npm/colorette@2.0.20",
        "pkg:npm/memfs@3.5.3",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/ws@8.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-dev-server@4.15.2",
      "dependsOn": [
        "pkg:npm/@types/bonjour@3.5.13",
        "pkg:npm/@types/connect-history-api-fallback@1.5.4",
        "pkg:npm/@types/express@4.17.21",
        "pkg:npm/@types/serve-index@1.9.4",
        "pkg:npm/@types/serve-static@1.15.7",
        "pkg:npm/@types/sockjs@0.3.36",
        "pkg:npm/@types/ws@8.18.0",
        "pkg:npm/ansi-html-community@0.0.8",
        "pkg:npm/bonjour-service@1.3.0",
        "pkg:npm/chokidar@3.6.0",
        "pkg:npm/colorette@2.0.20",
        "pkg:npm/compression@1.8.1",
        "pkg:npm/connect-history-api-fallback@2.0.0",
        "pkg:npm/default-gateway@6.0.3",
        "pkg:npm/express@4.22.1",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/html-entities@2.5.2",
        "pkg:npm/http-proxy-middleware@2.0.9",
        "pkg:npm/ipaddr.js@2.2.0",
        "pkg:npm/launch-editor@2.10.0",
        "pkg:npm/open@8.4.2",
        "pkg:npm/p-retry@4.6.2",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/selfsigned@2.4.1",
        "pkg:npm/serve-index@1.9.1",
        "pkg:npm/sockjs@0.3.24",
        "pkg:npm/spdy@4.0.2",
        "pkg:npm/webpack-dev-middleware@5.3.4",
        "pkg:npm/webpack@5.105.0",
        "pkg:npm/ws@8.18.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-html@0.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js-pure@3.41.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stackframe@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-stack-parser@2.1.4",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@pmmmwh/react-refresh-webpack-plugin@0.5.15",
      "dependsOn": [
        "pkg:npm/ansi-html@0.0.9",
        "pkg:npm/core-js-pure@3.41.0",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/html-entities@2.5.2",
        "pkg:npm/loader-utils@2.0.4",
        "pkg:npm/react-refresh@0.11.0",
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/source-map@0.7.4",
        "pkg:npm/type-fest@0.21.3",
        "pkg:npm/webpack-dev-server@4.15.2",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-plugin-utils@7.26.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-constant-elements@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-bugfix-safari-class-field-initializer-scope@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-optional-chaining@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9",
        "pkg:npm/@babel/plugin-transform-optional-chaining@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-import-assertions@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-import-attributes@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/regenerate@1.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerate-unicode-properties@10.2.0",
      "dependsOn": [
        "pkg:npm/regenerate@1.4.2"
      ]
    },
    {
      "ref": "pkg:npm/regjsgen@0.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsesc@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regjsparser@0.12.0",
      "dependsOn": [
        "pkg:npm/jsesc@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/unicode-canonical-property-names-ecmascript@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-property-aliases-ecmascript@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-match-property-ecmascript@2.0.0",
      "dependsOn": [
        "pkg:npm/unicode-canonical-property-names-ecmascript@2.0.1",
        "pkg:npm/unicode-property-aliases-ecmascript@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unicode-match-property-value-ecmascript@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regexpu-core@6.2.0",
      "dependsOn": [
        "pkg:npm/regenerate-unicode-properties@10.2.0",
        "pkg:npm/regenerate@1.4.2",
        "pkg:npm/regjsgen@0.8.0",
        "pkg:npm/regjsparser@0.12.0",
        "pkg:npm/unicode-match-property-ecmascript@2.0.0",
        "pkg:npm/unicode-match-property-value-ecmascript@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/regexpu-core@6.2.0",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-unicode-sets-regex@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-arrow-functions@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-wrap-function@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/template@7.26.9",
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-remap-async-to-generator@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-wrap-function@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-async-generator-functions@7.26.8",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-remap-async-to-generator@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-async-to-generator@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-imports@7.25.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-remap-async-to-generator@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-block-scoped-functions@7.26.5",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-block-scoping@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-member-expression-to-functions@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-optimise-call-expression@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-replace-supers@7.26.5",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-member-expression-to-functions@7.25.9",
        "pkg:npm/@babel/helper-optimise-call-expression@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-member-expression-to-functions@7.25.9",
        "pkg:npm/@babel/helper-optimise-call-expression@7.25.9",
        "pkg:npm/@babel/helper-replace-supers@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-class-properties@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-class-static-block@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-classes@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-compilation-targets@7.26.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-replace-supers@7.26.5",
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/globals@11.12.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-computed-properties@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/template@7.26.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-destructuring@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-dotall-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-duplicate-keys@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-dynamic-import@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-exponentiation-operator@7.26.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-export-namespace-from@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-for-of@7.26.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-function-name@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-compilation-targets@7.26.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-json-strings@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-literals@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-logical-assignment-operators@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-member-expression-literals@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-amd@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-transforms@7.26.0",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-commonjs@7.26.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-transforms@7.26.0",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-systemjs@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-transforms@7.26.0",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-validator-identifier@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-umd@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-transforms@7.26.0",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-named-capturing-groups-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-new-target@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-nullish-coalescing-operator@7.26.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-numeric-separator@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-parameters@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-object-rest-spread@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-compilation-targets@7.26.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-transform-parameters@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-object-super@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-replace-supers@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-optional-catch-binding@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-private-methods@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-private-property-in-object@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-property-literals@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/runtime@7.26.10",
      "dependsOn": [
        "pkg:npm/regenerator-runtime@0.14.1"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-transform@0.15.2",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-regenerator@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/regenerator-transform@0.15.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-regexp-modifiers@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-reserved-words@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-shorthand-properties@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-spread@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-sticky-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-template-literals@7.26.8",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-typeof-symbol@7.26.7",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-unicode-escapes@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-unicode-property-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-unicode-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-unicode-sets-regex@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.26.3",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/preset-modules@0.1.6-no-external-plugins",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash.debounce@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-core-module@2.16.1",
      "dependsOn": [
        "pkg:npm/hasown@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.22.10",
      "dependsOn": [
        "pkg:npm/is-core-module@2.16.1",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-define-polyfill-provider@0.6.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-compilation-targets@7.26.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/lodash.debounce@4.0.8",
        "pkg:npm/resolve@1.22.10"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-polyfill-corejs2@0.4.12",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.26.8",
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-define-polyfill-provider@0.6.3",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/core-js-compat@3.41.0",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-polyfill-corejs3@0.11.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-define-polyfill-provider@0.6.3",
        "pkg:npm/core-js-compat@3.41.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-polyfill-regenerator@0.6.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-define-polyfill-provider@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/preset-env@7.26.9",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.26.8",
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-compilation-targets@7.26.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-validator-option@7.25.9",
        "pkg:npm/@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.25.9",
        "pkg:npm/@babel/plugin-bugfix-safari-class-field-initializer-scope@7.25.9",
        "pkg:npm/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.25.9",
        "pkg:npm/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.25.9",
        "pkg:npm/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.25.9",
        "pkg:npm/@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2",
        "pkg:npm/@babel/plugin-syntax-import-assertions@7.26.0",
        "pkg:npm/@babel/plugin-syntax-import-attributes@7.26.0",
        "pkg:npm/@babel/plugin-syntax-unicode-sets-regex@7.18.6",
        "pkg:npm/@babel/plugin-transform-arrow-functions@7.25.9",
        "pkg:npm/@babel/plugin-transform-async-generator-functions@7.26.8",
        "pkg:npm/@babel/plugin-transform-async-to-generator@7.25.9",
        "pkg:npm/@babel/plugin-transform-block-scoped-functions@7.26.5",
        "pkg:npm/@babel/plugin-transform-block-scoping@7.25.9",
        "pkg:npm/@babel/plugin-transform-class-properties@7.25.9",
        "pkg:npm/@babel/plugin-transform-class-static-block@7.26.0",
        "pkg:npm/@babel/plugin-transform-classes@7.25.9",
        "pkg:npm/@babel/plugin-transform-computed-properties@7.25.9",
        "pkg:npm/@babel/plugin-transform-destructuring@7.25.9",
        "pkg:npm/@babel/plugin-transform-dotall-regex@7.25.9",
        "pkg:npm/@babel/plugin-transform-duplicate-keys@7.25.9",
        "pkg:npm/@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.25.9",
        "pkg:npm/@babel/plugin-transform-dynamic-import@7.25.9",
        "pkg:npm/@babel/plugin-transform-exponentiation-operator@7.26.3",
        "pkg:npm/@babel/plugin-transform-export-namespace-from@7.25.9",
        "pkg:npm/@babel/plugin-transform-for-of@7.26.9",
        "pkg:npm/@babel/plugin-transform-function-name@7.25.9",
        "pkg:npm/@babel/plugin-transform-json-strings@7.25.9",
        "pkg:npm/@babel/plugin-transform-literals@7.25.9",
        "pkg:npm/@babel/plugin-transform-logical-assignment-operators@7.25.9",
        "pkg:npm/@babel/plugin-transform-member-expression-literals@7.25.9",
        "pkg:npm/@babel/plugin-transform-modules-amd@7.25.9",
        "pkg:npm/@babel/plugin-transform-modules-commonjs@7.26.3",
        "pkg:npm/@babel/plugin-transform-modules-systemjs@7.25.9",
        "pkg:npm/@babel/plugin-transform-modules-umd@7.25.9",
        "pkg:npm/@babel/plugin-transform-named-capturing-groups-regex@7.25.9",
        "pkg:npm/@babel/plugin-transform-new-target@7.25.9",
        "pkg:npm/@babel/plugin-transform-nullish-coalescing-operator@7.26.6",
        "pkg:npm/@babel/plugin-transform-numeric-separator@7.25.9",
        "pkg:npm/@babel/plugin-transform-object-rest-spread@7.25.9",
        "pkg:npm/@babel/plugin-transform-object-super@7.25.9",
        "pkg:npm/@babel/plugin-transform-optional-catch-binding@7.25.9",
        "pkg:npm/@babel/plugin-transform-optional-chaining@7.25.9",
        "pkg:npm/@babel/plugin-transform-parameters@7.25.9",
        "pkg:npm/@babel/plugin-transform-private-methods@7.25.9",
        "pkg:npm/@babel/plugin-transform-private-property-in-object@7.25.9",
        "pkg:npm/@babel/plugin-transform-property-literals@7.25.9",
        "pkg:npm/@babel/plugin-transform-regenerator@7.25.9",
        "pkg:npm/@babel/plugin-transform-regexp-modifiers@7.26.0",
        "pkg:npm/@babel/plugin-transform-reserved-words@7.25.9",
        "pkg:npm/@babel/plugin-transform-shorthand-properties@7.25.9",
        "pkg:npm/@babel/plugin-transform-spread@7.25.9",
        "pkg:npm/@babel/plugin-transform-sticky-regex@7.25.9",
        "pkg:npm/@babel/plugin-transform-template-literals@7.26.8",
        "pkg:npm/@babel/plugin-transform-typeof-symbol@7.26.7",
        "pkg:npm/@babel/plugin-transform-unicode-escapes@7.25.9",
        "pkg:npm/@babel/plugin-transform-unicode-property-regex@7.25.9",
        "pkg:npm/@babel/plugin-transform-unicode-regex@7.25.9",
        "pkg:npm/@babel/plugin-transform-unicode-sets-regex@7.25.9",
        "pkg:npm/@babel/preset-modules@0.1.6-no-external-plugins",
        "pkg:npm/babel-plugin-polyfill-corejs2@0.4.12",
        "pkg:npm/babel-plugin-polyfill-corejs3@0.11.1",
        "pkg:npm/babel-plugin-polyfill-regenerator@0.6.3",
        "pkg:npm/core-js-compat@3.41.0",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-display-name@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-jsx@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-module-imports@7.25.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-syntax-jsx@7.25.9",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx-development@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/plugin-transform-react-jsx@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-pure-annotations@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/preset-react@7.26.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-validator-option@7.25.9",
        "pkg:npm/@babel/plugin-transform-react-display-name@7.25.9",
        "pkg:npm/@babel/plugin-transform-react-jsx-development@7.25.9",
        "pkg:npm/@babel/plugin-transform-react-jsx@7.25.9",
        "pkg:npm/@babel/plugin-transform-react-pure-annotations@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-add-jsx-attribute@5.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-remove-jsx-attribute@5.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-remove-jsx-empty-expression@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-replace-jsx-attribute-value@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-svg-dynamic-title@5.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-svg-em-dimensions@5.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-transform-react-native-svg@5.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-plugin-transform-svg-component@5.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/babel-preset@5.5.0",
      "dependsOn": [
        "pkg:npm/@svgr/babel-plugin-add-jsx-attribute@5.4.0",
        "pkg:npm/@svgr/babel-plugin-remove-jsx-attribute@5.4.0",
        "pkg:npm/@svgr/babel-plugin-remove-jsx-empty-expression@5.0.1",
        "pkg:npm/@svgr/babel-plugin-replace-jsx-attribute-value@5.0.1",
        "pkg:npm/@svgr/babel-plugin-svg-dynamic-title@5.4.0",
        "pkg:npm/@svgr/babel-plugin-svg-em-dimensions@5.4.0",
        "pkg:npm/@svgr/babel-plugin-transform-react-native-svg@5.4.0",
        "pkg:npm/@svgr/babel-plugin-transform-svg-component@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/@svgr/hast-util-to-babel-ast@5.5.0",
      "dependsOn": [
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/svg-parser@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@svgr/plugin-jsx@5.5.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@svgr/babel-preset@5.5.0",
        "pkg:npm/@svgr/hast-util-to-babel-ast@5.5.0",
        "pkg:npm/svg-parser@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/parse-json@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsites@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parent-module@1.0.1",
      "dependsOn": [
        "pkg:npm/callsites@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/import-fresh@3.3.1",
      "dependsOn": [
        "pkg:npm/parent-module@1.0.1",
        "pkg:npm/resolve-from@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/lines-and-columns@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-json@5.2.0",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/error-ex@1.3.2",
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/lines-and-columns@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/path-type@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yaml@1.10.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cosmiconfig@7.1.0",
      "dependsOn": [
        "pkg:npm/@types/parse-json@4.0.2",
        "pkg:npm/import-fresh@3.3.1",
        "pkg:npm/parse-json@5.2.0",
        "pkg:npm/path-type@4.0.0",
        "pkg:npm/yaml@1.10.3"
      ]
    },
    {
      "ref": "pkg:npm/@svgr/core@5.5.0",
      "dependsOn": [
        "pkg:npm/@svgr/plugin-jsx@5.5.0",
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/cosmiconfig@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/deepmerge@4.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/q@1.5.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/coa@2.0.2",
      "dependsOn": [
        "pkg:npm/@types/q@1.5.8",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/q@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/boolbase@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@3.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.2.2",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/entities@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domutils@1.7.0",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.2.2",
        "pkg:npm/domelementtype@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@1.0.2",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@2.1.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@3.4.2",
        "pkg:npm/domutils@1.7.0",
        "pkg:npm/nth-check@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/css-select-base-adapter@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mdn-data@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-tree@1.0.0-alpha.37",
      "dependsOn": [
        "pkg:npm/mdn-data@2.0.4",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/mdn-data@2.0.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-tree@1.1.3",
      "dependsOn": [
        "pkg:npm/mdn-data@2.0.14",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/csso@4.2.0",
      "dependsOn": [
        "pkg:npm/css-tree@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.2",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.6",
      "dependsOn": [
        "pkg:npm/minimist@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/define-data-property@1.1.4",
      "dependsOn": [
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/gopd@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/has-property-descriptors@1.0.2",
      "dependsOn": [
        "pkg:npm/es-define-property@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/set-function-length@1.2.2",
      "dependsOn": [
        "pkg:npm/define-data-property@1.1.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/function-bind@1.1.2",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.8",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/set-function-length@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/object-keys@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.2.1",
      "dependsOn": [
        "pkg:npm/define-data-property@1.1.4",
        "pkg:npm/has-property-descriptors@1.0.2",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object.values@1.2.1",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stable@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unquote@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-array-buffer@3.0.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/array-buffer-byte-length@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/is-array-buffer@3.0.5"
      ]
    },
    {
      "ref": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
      "dependsOn": [
        "pkg:npm/array-buffer-byte-length@1.0.2",
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/is-array-buffer@3.0.5"
      ]
    },
    {
      "ref": "pkg:npm/possible-typed-array-names@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/available-typed-arrays@1.0.7",
      "dependsOn": [
        "pkg:npm/possible-typed-array-names@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-callable@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-each@0.3.5",
      "dependsOn": [
        "pkg:npm/is-callable@1.2.7"
      ]
    },
    {
      "ref": "pkg:npm/has-tostringtag@1.0.2",
      "dependsOn": [
        "pkg:npm/has-symbols@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/which-typed-array@1.1.19",
      "dependsOn": [
        "pkg:npm/available-typed-arrays@1.0.7",
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/for-each@0.3.5",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-typed-array@1.1.15",
      "dependsOn": [
        "pkg:npm/which-typed-array@1.1.19"
      ]
    },
    {
      "ref": "pkg:npm/is-data-view@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "pkg:npm/data-view-buffer@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/is-data-view@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/data-view-byte-length@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/is-data-view@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/data-view-byte-offset@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/is-data-view@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/es-set-tostringtag@2.1.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/has-tostringtag@1.0.2",
        "pkg:npm/hasown@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-date-object@1.1.0",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-regex@1.2.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-tostringtag@1.0.2",
        "pkg:npm/hasown@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/safe-regex-test@1.1.0",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/is-regex@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/is-symbol@1.1.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/safe-regex-test@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.3.0",
      "dependsOn": [
        "pkg:npm/is-callable@1.2.7",
        "pkg:npm/is-date-object@1.1.0",
        "pkg:npm/is-symbol@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/functions-have-names@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function.prototype.name@1.1.8",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/functions-have-names@1.2.3",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/is-callable@1.2.7"
      ]
    },
    {
      "ref": "pkg:npm/get-symbol-description@1.1.0",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/globalthis@1.0.4",
      "dependsOn": [
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/gopd@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/has-proto@1.2.0",
      "dependsOn": [
        "pkg:npm/dunder-proto@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/internal-slot@1.1.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/side-channel@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-shared-array-buffer@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/is-string@1.1.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-weakref@1.1.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/object.assign@4.1.7",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isarray@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-push-apply@1.0.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/isarray@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/own-keys@1.0.1",
      "dependsOn": [
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/safe-push-apply@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/set-function-name@2.0.2",
      "dependsOn": [
        "pkg:npm/define-data-property@1.1.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/functions-have-names@1.2.3",
        "pkg:npm/has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/regexp.prototype.flags@1.5.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/set-function-name@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/safe-array-concat@1.1.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/isarray@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/set-proto@1.0.0",
      "dependsOn": [
        "pkg:npm/dunder-proto@1.0.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trim@1.2.10",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-data-property@1.1.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trimend@1.0.9",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trimstart@1.0.8",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/typed-array-buffer@1.0.3",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "pkg:npm/typed-array-byte-length@1.0.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/for-each@0.3.5",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-proto@1.2.0",
        "pkg:npm/is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "pkg:npm/async-function@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-async-function@2.1.1",
      "dependsOn": [
        "pkg:npm/async-function@1.0.0",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/has-tostringtag@1.0.2",
        "pkg:npm/safe-regex-test@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-finalizationregistry@1.1.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/is-generator-function@1.1.0",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/has-tostringtag@1.0.2",
        "pkg:npm/safe-regex-test@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/has-bigints@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-bigint@1.1.0",
      "dependsOn": [
        "pkg:npm/has-bigints@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-boolean-object@1.2.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-number-object@1.1.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/which-boxed-primitive@1.1.1",
      "dependsOn": [
        "pkg:npm/is-bigint@1.1.0",
        "pkg:npm/is-boolean-object@1.2.2",
        "pkg:npm/is-number-object@1.1.1",
        "pkg:npm/is-string@1.1.1",
        "pkg:npm/is-symbol@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-map@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-set@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-weakmap@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-weakset@2.0.4",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/which-collection@1.0.2",
      "dependsOn": [
        "pkg:npm/is-map@2.0.3",
        "pkg:npm/is-set@2.0.3",
        "pkg:npm/is-weakmap@2.0.2",
        "pkg:npm/is-weakset@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/which-builtin-type@1.2.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/function.prototype.name@1.1.8",
        "pkg:npm/has-tostringtag@1.0.2",
        "pkg:npm/is-async-function@2.1.1",
        "pkg:npm/is-date-object@1.1.0",
        "pkg:npm/is-finalizationregistry@1.1.1",
        "pkg:npm/is-generator-function@1.1.0",
        "pkg:npm/is-regex@1.2.1",
        "pkg:npm/is-weakref@1.1.1",
        "pkg:npm/isarray@2.0.5",
        "pkg:npm/which-boxed-primitive@1.1.1",
        "pkg:npm/which-collection@1.0.2",
        "pkg:npm/which-typed-array@1.1.19"
      ]
    },
    {
      "ref": "pkg:npm/reflect.getprototypeof@1.0.10",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/which-builtin-type@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/typed-array-byte-offset@1.0.4",
      "dependsOn": [
        "pkg:npm/available-typed-arrays@1.0.7",
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/for-each@0.3.5",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-proto@1.2.0",
        "pkg:npm/is-typed-array@1.1.15",
        "pkg:npm/reflect.getprototypeof@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/typed-array-length@1.0.7",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/for-each@0.3.5",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/is-typed-array@1.1.15",
        "pkg:npm/possible-typed-array-names@1.1.0",
        "pkg:npm/reflect.getprototypeof@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/unbox-primitive@1.1.0",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/has-bigints@1.1.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/which-boxed-primitive@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.23.9",
      "dependsOn": [
        "pkg:npm/array-buffer-byte-length@1.0.2",
        "pkg:npm/arraybuffer.prototype.slice@1.0.4",
        "pkg:npm/available-typed-arrays@1.0.7",
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/data-view-buffer@1.0.2",
        "pkg:npm/data-view-byte-length@1.0.2",
        "pkg:npm/data-view-byte-offset@1.0.1",
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/es-set-tostringtag@2.1.0",
        "pkg:npm/es-to-primitive@1.3.0",
        "pkg:npm/function.prototype.name@1.1.8",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/get-symbol-description@1.1.0",
        "pkg:npm/globalthis@1.0.4",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-property-descriptors@1.0.2",
        "pkg:npm/has-proto@1.2.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/internal-slot@1.1.0",
        "pkg:npm/is-array-buffer@3.0.5",
        "pkg:npm/is-callable@1.2.7",
        "pkg:npm/is-data-view@1.0.2",
        "pkg:npm/is-regex@1.2.1",
        "pkg:npm/is-shared-array-buffer@1.0.4",
        "pkg:npm/is-string@1.1.1",
        "pkg:npm/is-typed-array@1.1.15",
        "pkg:npm/is-weakref@1.1.1",
        "pkg:npm/math-intrinsics@1.1.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/object.assign@4.1.7",
        "pkg:npm/own-keys@1.0.1",
        "pkg:npm/regexp.prototype.flags@1.5.4",
        "pkg:npm/safe-array-concat@1.1.3",
        "pkg:npm/safe-push-apply@1.0.0",
        "pkg:npm/safe-regex-test@1.1.0",
        "pkg:npm/set-proto@1.0.0",
        "pkg:npm/string.prototype.trim@1.2.10",
        "pkg:npm/string.prototype.trimend@1.0.9",
        "pkg:npm/string.prototype.trimstart@1.0.8",
        "pkg:npm/typed-array-buffer@1.0.3",
        "pkg:npm/typed-array-byte-length@1.0.3",
        "pkg:npm/typed-array-byte-offset@1.0.4",
        "pkg:npm/typed-array-length@1.0.7",
        "pkg:npm/unbox-primitive@1.1.0",
        "pkg:npm/which-typed-array@1.1.19"
      ]
    },
    {
      "ref": "pkg:npm/es-array-method-boxes-properly@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array.prototype.reduce@1.0.7",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-array-method-boxes-properly@1.0.0",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/is-string@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object.getownpropertydescriptors@2.1.8",
      "dependsOn": [
        "pkg:npm/array.prototype.reduce@1.0.7",
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/safe-array-concat@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/util.promisify@1.0.1",
      "dependsOn": [
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/object.getownpropertydescriptors@2.1.8"
      ]
    },
    {
      "ref": "pkg:npm/svgo@1.3.2",
      "dependsOn": [
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/coa@2.0.2",
        "pkg:npm/css-select-base-adapter@0.1.1",
        "pkg:npm/css-select@2.1.0",
        "pkg:npm/css-tree@1.0.0-alpha.37",
        "pkg:npm/csso@4.2.0",
        "pkg:npm/js-yaml@3.14.2",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/object.values@1.2.1",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/stable@0.1.8",
        "pkg:npm/unquote@1.1.1",
        "pkg:npm/util.promisify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@svgr/plugin-svgo@5.5.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@7.1.0",
        "pkg:npm/deepmerge@4.3.1",
        "pkg:npm/svgo@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/@svgr/webpack@5.5.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/plugin-transform-react-constant-elements@7.25.9",
        "pkg:npm/@babel/preset-env@7.26.9",
        "pkg:npm/@babel/preset-react@7.26.3",
        "pkg:npm/@svgr/core@5.5.0",
        "pkg:npm/@svgr/plugin-jsx@5.5.0",
        "pkg:npm/@svgr/plugin-svgo@5.5.0",
        "pkg:npm/loader-utils@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/istanbul-lib-report@3.0.3",
      "dependsOn": [
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/@types/istanbul-reports@3.0.4",
      "dependsOn": [
        "pkg:npm/@types/istanbul-lib-report@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/yargs-parser@21.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/yargs@16.0.9",
      "dependsOn": [
        "pkg:npm/@types/yargs-parser@21.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@jest/types@27.5.1",
      "dependsOn": [
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/@types/istanbul-reports@3.0.4",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/@types/yargs@16.0.9",
        "pkg:npm/chalk@4.1.2"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-package-type@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-from@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/find-up@4.1.0",
        "pkg:npm/get-package-type@0.1.0",
        "pkg:npm/js-yaml@3.14.2",
        "pkg:npm/resolve-from@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-instrument@5.2.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/test-exclude@6.0.0",
      "dependsOn": [
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/minimatch@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-istanbul@6.1.1",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/istanbul-lib-instrument@5.2.1",
        "pkg:npm/test-exclude@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/graceful-fs@4.1.9",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/node-int64@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bser@2.1.1",
      "dependsOn": [
        "pkg:npm/node-int64@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/fb-watchman@2.0.2",
      "dependsOn": [
        "pkg:npm/bser@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-regex-util@27.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-serializer@27.5.1",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/graceful-fs@4.2.11"
      ]
    },
    {
      "ref": "pkg:npm/ci-info@3.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-util@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/ci-info@3.9.0",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/picomatch@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/tmpl@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/makeerror@1.0.12",
      "dependsOn": [
        "pkg:npm/tmpl@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/walker@1.0.8",
      "dependsOn": [
        "pkg:npm/makeerror@1.0.12"
      ]
    },
    {
      "ref": "pkg:npm/jest-haste-map@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/graceful-fs@4.1.9",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/anymatch@3.1.3",
        "pkg:npm/fb-watchman@2.0.2",
        "pkg:npm/fsevents@2.3.3",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-regex-util@27.5.1",
        "pkg:npm/jest-serializer@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-worker@27.5.1",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/walker@1.0.8"
      ]
    },
    {
      "ref": "pkg:npm/pirates@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slash@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typedarray-to-buffer@3.1.5",
      "dependsOn": [
        "pkg:npm/is-typedarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/write-file-atomic@3.0.3",
      "dependsOn": [
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/typedarray-to-buffer@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/@jest/transform@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/babel-plugin-istanbul@6.1.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-regex-util@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/pirates@4.0.6",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/write-file-atomic@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/babel__generator@7.6.8",
      "dependsOn": [
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/babel__template@7.4.4",
      "dependsOn": [
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/babel__traverse@7.20.6",
      "dependsOn": [
        "pkg:npm/@babel/types@7.26.10"
      ]
    },
    {
      "ref": "pkg:npm/@types/babel__core@7.20.5",
      "dependsOn": [
        "pkg:npm/@babel/parser@7.26.10",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/@types/babel__generator@7.6.8",
        "pkg:npm/@types/babel__template@7.4.4",
        "pkg:npm/@types/babel__traverse@7.20.6"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-jest-hoist@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/template@7.26.9",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/@types/babel__core@7.20.5",
        "pkg:npm/@types/babel__traverse@7.20.6"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-bigint@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-class-properties@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-class-static-block@7.14.5",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-import-meta@7.10.4",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-private-property-in-object@7.14.5",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-top-level-await@7.14.5",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-current-node-syntax@1.1.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4",
        "pkg:npm/@babel/plugin-syntax-bigint@7.8.3",
        "pkg:npm/@babel/plugin-syntax-class-properties@7.12.13",
        "pkg:npm/@babel/plugin-syntax-class-static-block@7.14.5",
        "pkg:npm/@babel/plugin-syntax-import-attributes@7.26.0",
        "pkg:npm/@babel/plugin-syntax-import-meta@7.10.4",
        "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3",
        "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4",
        "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
        "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4",
        "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
        "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3",
        "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3",
        "pkg:npm/@babel/plugin-syntax-private-property-in-object@7.14.5",
        "pkg:npm/@babel/plugin-syntax-top-level-await@7.14.5"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-jest@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/babel-plugin-jest-hoist@27.5.1",
        "pkg:npm/babel-preset-current-node-syntax@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-jest@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@jest/transform@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/babel__core@7.20.5",
        "pkg:npm/babel-plugin-istanbul@6.1.1",
        "pkg:npm/babel-preset-jest@27.5.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@2.7.1",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.14.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-loader@8.4.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/find-cache-dir@3.3.2",
        "pkg:npm/loader-utils@2.0.4",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/schema-utils@2.7.1",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-named-asset-import@0.3.8",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-class-properties@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-decorators@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-decorators@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-syntax-decorators@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-numeric-separator@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-optional-chaining@7.21.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9",
        "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-private-methods@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-private-property-in-object@7.21.11",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-syntax-private-property-in-object@7.14.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-flow@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-flow-strip-types@7.26.5",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/plugin-syntax-flow@7.26.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-runtime@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-imports@7.25.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/babel-plugin-polyfill-corejs2@0.4.12",
        "pkg:npm/babel-plugin-polyfill-corejs3@0.11.1",
        "pkg:npm/babel-plugin-polyfill-regenerator@0.6.3",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-typescript@7.25.9",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-typescript@7.26.8",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-annotate-as-pure@7.25.9",
        "pkg:npm/@babel/helper-create-class-features-plugin@7.26.9",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.25.9",
        "pkg:npm/@babel/plugin-syntax-typescript@7.25.9"
      ]
    },
    {
      "ref": "pkg:npm/@babel/preset-typescript@7.26.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-plugin-utils@7.26.5",
        "pkg:npm/@babel/helper-validator-option@7.25.9",
        "pkg:npm/@babel/plugin-syntax-jsx@7.25.9",
        "pkg:npm/@babel/plugin-transform-modules-commonjs@7.26.3",
        "pkg:npm/@babel/plugin-transform-typescript@7.26.8"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-macros@3.1.0",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.26.10",
        "pkg:npm/cosmiconfig@7.1.0",
        "pkg:npm/resolve@1.22.10"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-remove-prop-types@0.4.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-preset-react-app@10.1.0",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/plugin-proposal-class-properties@7.18.6",
        "pkg:npm/@babel/plugin-proposal-decorators@7.25.9",
        "pkg:npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6",
        "pkg:npm/@babel/plugin-proposal-numeric-separator@7.18.6",
        "pkg:npm/@babel/plugin-proposal-optional-chaining@7.21.0",
        "pkg:npm/@babel/plugin-proposal-private-methods@7.18.6",
        "pkg:npm/@babel/plugin-proposal-private-property-in-object@7.21.11",
        "pkg:npm/@babel/plugin-transform-flow-strip-types@7.26.5",
        "pkg:npm/@babel/plugin-transform-react-display-name@7.25.9",
        "pkg:npm/@babel/plugin-transform-runtime@7.26.10",
        "pkg:npm/@babel/preset-env@7.26.9",
        "pkg:npm/@babel/preset-react@7.26.3",
        "pkg:npm/@babel/preset-typescript@7.26.0",
        "pkg:npm/@babel/runtime@7.26.10",
        "pkg:npm/babel-plugin-macros@3.1.0",
        "pkg:npm/babel-plugin-transform-react-remove-prop-types@0.4.24"
      ]
    },
    {
      "ref": "pkg:npm/check-types@11.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hoopy@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escodegen@2.1.0",
      "dependsOn": [
        "pkg:npm/esprima@4.0.1",
        "pkg:npm/estraverse@5.3.0",
        "pkg:npm/esutils@2.0.3",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/static-eval@2.1.1",
      "dependsOn": [
        "pkg:npm/escodegen@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.13.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonpath@1.3.0",
      "dependsOn": [
        "pkg:npm/esprima@1.2.5",
        "pkg:npm/static-eval@2.1.1",
        "pkg:npm/underscore@1.13.6"
      ]
    },
    {
      "ref": "pkg:npm/tryer@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bfj@7.1.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.7.2",
        "pkg:npm/check-types@11.2.3",
        "pkg:npm/hoopy@0.1.4",
        "pkg:npm/jsonpath@1.3.0",
        "pkg:npm/tryer@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.3.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss@8.5.3",
      "dependsOn": [
        "pkg:npm/nanoid@3.3.9",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/source-map-js@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/icss-utils@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-extract-imports@3.1.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/cssesc@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-selector-parser@7.1.0",
      "dependsOn": [
        "pkg:npm/cssesc@3.0.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-value-parser@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-modules-local-by-default@4.2.0",
      "dependsOn": [
        "pkg:npm/icss-utils@5.1.0",
        "pkg:npm/postcss-selector-parser@7.1.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-scope@3.2.1",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@7.1.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-values@4.0.0",
      "dependsOn": [
        "pkg:npm/icss-utils@5.1.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/yallist@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@6.0.0",
      "dependsOn": [
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@7.5.4",
      "dependsOn": [
        "pkg:npm/lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-loader@6.11.0",
      "dependsOn": [
        "pkg:npm/icss-utils@5.1.0",
        "pkg:npm/postcss-modules-extract-imports@3.1.0",
        "pkg:npm/postcss-modules-local-by-default@4.2.0",
        "pkg:npm/postcss-modules-scope@3.2.1",
        "pkg:npm/postcss-modules-values@4.0.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/css-declaration-sorter@6.4.1",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/cssnano-utils@3.1.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-selector-parser@6.1.2",
      "dependsOn": [
        "pkg:npm/cssesc@3.0.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-calc@8.2.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash.memoize@4.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.uniq@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-api@3.0.0",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/caniuse-lite@1.0.30001769",
        "pkg:npm/lodash.memoize@4.1.2",
        "pkg:npm/lodash.uniq@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/colord@2.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-colormin@5.3.1",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/caniuse-api@3.0.0",
        "pkg:npm/colord@2.9.3",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-convert-values@5.1.3",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-comments@5.1.2",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-duplicates@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-empty@5.1.1",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-overridden@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/stylehacks@5.1.1",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-longhand@5.1.7",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/stylehacks@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-rules@5.1.4",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/caniuse-api@3.0.0",
        "pkg:npm/cssnano-utils@3.1.0",
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-font-values@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-gradients@5.1.1",
      "dependsOn": [
        "pkg:npm/colord@2.9.3",
        "pkg:npm/cssnano-utils@3.1.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-params@5.1.4",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/cssnano-utils@3.1.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-selectors@5.2.1",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-charset@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-display-values@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-positions@5.1.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-repeat-style@5.1.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-string@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-timing-functions@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-unicode@5.1.1",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/normalize-url@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-normalize-url@5.1.0",
      "dependsOn": [
        "pkg:npm/normalize-url@6.1.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-whitespace@5.1.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-ordered-values@5.1.3",
      "dependsOn": [
        "pkg:npm/cssnano-utils@3.1.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-initial@5.1.2",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/caniuse-api@3.0.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-transforms@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/commander@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domhandler@4.3.1",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/dom-serializer@1.4.1",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@4.3.1",
        "pkg:npm/entities@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@2.8.0",
      "dependsOn": [
        "pkg:npm/dom-serializer@1.4.1",
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@4.3.1"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@2.1.1",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@4.3.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@6.1.0",
        "pkg:npm/domhandler@4.3.1",
        "pkg:npm/domutils@2.8.0",
        "pkg:npm/nth-check@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/svgo@2.8.2",
      "dependsOn": [
        "pkg:npm/commander@7.2.0",
        "pkg:npm/css-select@4.3.0",
        "pkg:npm/css-tree@1.1.3",
        "pkg:npm/csso@4.2.0",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/sax@1.6.0",
        "pkg:npm/stable@0.1.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-svgo@5.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/svgo@2.8.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-unique-selectors@5.1.1",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/cssnano-preset-default@5.2.14",
      "dependsOn": [
        "pkg:npm/css-declaration-sorter@6.4.1",
        "pkg:npm/cssnano-utils@3.1.0",
        "pkg:npm/postcss-calc@8.2.4",
        "pkg:npm/postcss-colormin@5.3.1",
        "pkg:npm/postcss-convert-values@5.1.3",
        "pkg:npm/postcss-discard-comments@5.1.2",
        "pkg:npm/postcss-discard-duplicates@5.1.0",
        "pkg:npm/postcss-discard-empty@5.1.1",
        "pkg:npm/postcss-discard-overridden@5.1.0",
        "pkg:npm/postcss-merge-longhand@5.1.7",
        "pkg:npm/postcss-merge-rules@5.1.4",
        "pkg:npm/postcss-minify-font-values@5.1.0",
        "pkg:npm/postcss-minify-gradients@5.1.1",
        "pkg:npm/postcss-minify-params@5.1.4",
        "pkg:npm/postcss-minify-selectors@5.2.1",
        "pkg:npm/postcss-normalize-charset@5.1.0",
        "pkg:npm/postcss-normalize-display-values@5.1.0",
        "pkg:npm/postcss-normalize-positions@5.1.1",
        "pkg:npm/postcss-normalize-repeat-style@5.1.1",
        "pkg:npm/postcss-normalize-string@5.1.0",
        "pkg:npm/postcss-normalize-timing-functions@5.1.0",
        "pkg:npm/postcss-normalize-unicode@5.1.1",
        "pkg:npm/postcss-normalize-url@5.1.0",
        "pkg:npm/postcss-normalize-whitespace@5.1.1",
        "pkg:npm/postcss-ordered-values@5.1.3",
        "pkg:npm/postcss-reduce-initial@5.1.2",
        "pkg:npm/postcss-reduce-transforms@5.1.0",
        "pkg:npm/postcss-svgo@5.1.0",
        "pkg:npm/postcss-unique-selectors@5.1.1",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/lilconfig@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssnano@5.1.15",
      "dependsOn": [
        "pkg:npm/cssnano-preset-default@5.2.14",
        "pkg:npm/lilconfig@2.1.0",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/yaml@1.10.3"
      ]
    },
    {
      "ref": "pkg:npm/css-minimizer-webpack-plugin@3.4.1",
      "dependsOn": [
        "pkg:npm/cssnano@5.1.15",
        "pkg:npm/jest-worker@27.5.1",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/serialize-javascript@6.0.2",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/dotenv@10.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dotenv-expand@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-visitor-keys@3.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@eslint-community/eslint-utils@4.5.0",
      "dependsOn": [
        "pkg:npm/eslint-visitor-keys@3.4.3",
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/@eslint-community/regexpp@4.12.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-jsx@5.3.2",
      "dependsOn": [
        "pkg:npm/acorn@8.15.0"
      ]
    },
    {
      "ref": "pkg:npm/espree@9.6.1",
      "dependsOn": [
        "pkg:npm/acorn-jsx@5.3.2",
        "pkg:npm/acorn@8.15.0",
        "pkg:npm/eslint-visitor-keys@3.4.3"
      ]
    },
    {
      "ref": "pkg:npm/type-fest@0.20.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@13.24.0",
      "dependsOn": [
        "pkg:npm/type-fest@0.20.2"
      ]
    },
    {
      "ref": "pkg:npm/ignore@5.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@eslint/eslintrc@2.1.4",
      "dependsOn": [
        "pkg:npm/ajv@6.14.0",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/espree@9.6.1",
        "pkg:npm/globals@13.24.0",
        "pkg:npm/ignore@5.3.2",
        "pkg:npm/import-fresh@3.3.1",
        "pkg:npm/js-yaml@4.1.1",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/strip-json-comments@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@eslint/js@8.57.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@humanwhocodes/object-schema@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@humanwhocodes/config-array@0.13.0",
      "dependsOn": [
        "pkg:npm/@humanwhocodes/object-schema@2.0.3",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/minimatch@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/@humanwhocodes/module-importer@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@ungap/structured-clone@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@3.0.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/eslint-scope@7.2.2",
      "dependsOn": [
        "pkg:npm/esrecurse@4.3.0",
        "pkg:npm/estraverse@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/esquery@1.6.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/flatted@3.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-buffer@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/keyv@4.5.4",
      "dependsOn": [
        "pkg:npm/json-buffer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/flat-cache@3.2.0",
      "dependsOn": [
        "pkg:npm/flatted@3.4.2",
        "pkg:npm/keyv@4.5.4",
        "pkg:npm/rimraf@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/file-entry-cache@6.0.1",
      "dependsOn": [
        "pkg:npm/flat-cache@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@6.0.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/graphemer@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prelude-ls@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.4.0",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.4.1",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.merge@4.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/natural-compare@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/word-wrap@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.9.4",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.4",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0",
        "pkg:npm/word-wrap@1.2.5"
      ]
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint@8.57.1",
      "dependsOn": [
        "pkg:npm/@eslint-community/eslint-utils@4.5.0",
        "pkg:npm/@eslint-community/regexpp@4.12.1",
        "pkg:npm/@eslint/eslintrc@2.1.4",
        "pkg:npm/@eslint/js@8.57.1",
        "pkg:npm/@humanwhocodes/config-array@0.13.0",
        "pkg:npm/@humanwhocodes/module-importer@1.0.1",
        "pkg:npm/@nodelib/fs.walk@1.2.8",
        "pkg:npm/@ungap/structured-clone@1.3.0",
        "pkg:npm/ajv@6.14.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/doctrine@3.0.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/eslint-scope@7.2.2",
        "pkg:npm/eslint-visitor-keys@3.4.3",
        "pkg:npm/espree@9.6.1",
        "pkg:npm/esquery@1.6.0",
        "pkg:npm/esutils@2.0.3",
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/file-entry-cache@6.0.1",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/glob-parent@6.0.2",
        "pkg:npm/globals@13.24.0",
        "pkg:npm/graphemer@1.4.0",
        "pkg:npm/ignore@5.3.2",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/is-path-inside@3.0.3",
        "pkg:npm/js-yaml@4.1.1",
        "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/lodash.merge@4.6.2",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/optionator@0.9.4",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/text-table@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1",
      "dependsOn": [
        "pkg:npm/eslint-scope@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-visitor-keys@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/eslint-parser@7.26.10",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1",
        "pkg:npm/eslint-visitor-keys@2.1.0",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@rushstack/eslint-patch@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@typescript-eslint/types@5.62.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@typescript-eslint/visitor-keys@5.62.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/types@5.62.0",
        "pkg:npm/eslint-visitor-keys@3.4.3"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/scope-manager@5.62.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/types@5.62.0",
        "pkg:npm/@typescript-eslint/visitor-keys@5.62.0"
      ]
    },
    {
      "ref": "pkg:npm/array-union@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dir-glob@3.0.1",
      "dependsOn": [
        "pkg:npm/path-type@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/globby@11.1.0",
      "dependsOn": [
        "pkg:npm/array-union@2.1.0",
        "pkg:npm/dir-glob@3.0.1",
        "pkg:npm/fast-glob@3.3.3",
        "pkg:npm/ignore@5.3.2",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsutils@3.21.0",
      "dependsOn": [
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/typescript@4.9.5"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/typescript-estree@5.62.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/types@5.62.0",
        "pkg:npm/@typescript-eslint/visitor-keys@5.62.0",
        "pkg:npm/debug@4.4.0",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/tsutils@3.21.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/parser@5.62.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/scope-manager@5.62.0",
        "pkg:npm/@typescript-eslint/types@5.62.0",
        "pkg:npm/@typescript-eslint/typescript-estree@5.62.0",
        "pkg:npm/debug@4.4.0",
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/semver@7.5.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@typescript-eslint/utils@5.62.0",
      "dependsOn": [
        "pkg:npm/@eslint-community/eslint-utils@4.5.0",
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/@types/semver@7.5.8",
        "pkg:npm/@typescript-eslint/scope-manager@5.62.0",
        "pkg:npm/@typescript-eslint/types@5.62.0",
        "pkg:npm/@typescript-eslint/typescript-estree@5.62.0",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/semver@7.5.4"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/type-utils@5.62.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/typescript-estree@5.62.0",
        "pkg:npm/@typescript-eslint/utils@5.62.0",
        "pkg:npm/debug@4.4.0",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/tsutils@3.21.0"
      ]
    },
    {
      "ref": "pkg:npm/natural-compare-lite@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@typescript-eslint/eslint-plugin@5.62.0",
      "dependsOn": [
        "pkg:npm/@eslint-community/regexpp@4.12.1",
        "pkg:npm/@typescript-eslint/parser@5.62.0",
        "pkg:npm/@typescript-eslint/scope-manager@5.62.0",
        "pkg:npm/@typescript-eslint/type-utils@5.62.0",
        "pkg:npm/@typescript-eslint/utils@5.62.0",
        "pkg:npm/debug@4.4.0",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/graphemer@1.4.0",
        "pkg:npm/ignore@5.3.2",
        "pkg:npm/natural-compare-lite@1.4.0",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/tsutils@3.21.0"
      ]
    },
    {
      "ref": "pkg:npm/confusing-browser-globals@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-natural-compare@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-plugin-flowtype@8.0.3",
      "dependsOn": [
        "pkg:npm/@babel/plugin-syntax-flow@7.26.0",
        "pkg:npm/@babel/plugin-transform-react-jsx@7.25.9",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/string-natural-compare@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@rtsao/scc@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-includes@3.1.8",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/is-string@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es-shim-unscopables@1.1.0",
      "dependsOn": [
        "pkg:npm/hasown@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.findlastindex@1.2.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/es-shim-unscopables@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.flat@1.3.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-shim-unscopables@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.flatmap@1.3.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-shim-unscopables@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@3.2.7",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/doctrine@2.1.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/eslint-import-resolver-node@0.3.9",
      "dependsOn": [
        "pkg:npm/debug@3.2.7",
        "pkg:npm/is-core-module@2.16.1",
        "pkg:npm/resolve@1.22.10"
      ]
    },
    {
      "ref": "pkg:npm/eslint-module-utils@2.12.0",
      "dependsOn": [
        "pkg:npm/debug@3.2.7"
      ]
    },
    {
      "ref": "pkg:npm/object.fromentries@2.0.8",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object.groupby@1.0.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9"
      ]
    },
    {
      "ref": "pkg:npm/@types/json5@0.0.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@1.0.2",
      "dependsOn": [
        "pkg:npm/minimist@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsconfig-paths@3.15.0",
      "dependsOn": [
        "pkg:npm/@types/json5@0.0.29",
        "pkg:npm/json5@1.0.2",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-import@2.31.0",
      "dependsOn": [
        "pkg:npm/@rtsao/scc@1.1.0",
        "pkg:npm/array-includes@3.1.8",
        "pkg:npm/array.prototype.findlastindex@1.2.5",
        "pkg:npm/array.prototype.flat@1.3.3",
        "pkg:npm/array.prototype.flatmap@1.3.3",
        "pkg:npm/debug@3.2.7",
        "pkg:npm/doctrine@2.1.0",
        "pkg:npm/eslint-import-resolver-node@0.3.9",
        "pkg:npm/eslint-module-utils@2.12.0",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/is-core-module@2.16.1",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/object.fromentries@2.0.8",
        "pkg:npm/object.groupby@1.0.3",
        "pkg:npm/object.values@1.2.1",
        "pkg:npm/semver@6.3.1",
        "pkg:npm/string.prototype.trimend@1.0.9",
        "pkg:npm/tsconfig-paths@3.15.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/experimental-utils@5.62.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/utils@5.62.0",
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-jest@25.7.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/eslint-plugin@5.62.0",
        "pkg:npm/@typescript-eslint/experimental-utils@5.62.0",
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/aria-query@5.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-types-flow@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/axe-core@4.10.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/axobject-query@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/damerau-levenshtein@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsx-ast-utils@3.3.5",
      "dependsOn": [
        "pkg:npm/array-includes@3.1.8",
        "pkg:npm/array.prototype.flat@1.3.3",
        "pkg:npm/object.assign@4.1.7",
        "pkg:npm/object.values@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/language-subtag-registry@0.3.23",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/language-tags@1.0.9",
      "dependsOn": [
        "pkg:npm/language-subtag-registry@0.3.23"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.includes@2.0.1",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-jsx-a11y@6.10.2",
      "dependsOn": [
        "pkg:npm/aria-query@5.3.2",
        "pkg:npm/array-includes@3.1.8",
        "pkg:npm/array.prototype.flatmap@1.3.3",
        "pkg:npm/ast-types-flow@0.0.8",
        "pkg:npm/axe-core@4.10.3",
        "pkg:npm/axobject-query@4.1.0",
        "pkg:npm/damerau-levenshtein@1.0.8",
        "pkg:npm/emoji-regex@9.2.2",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/jsx-ast-utils@3.3.5",
        "pkg:npm/language-tags@1.0.9",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/object.fromentries@2.0.8",
        "pkg:npm/safe-regex-test@1.1.0",
        "pkg:npm/string.prototype.includes@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.findlast@1.2.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/es-shim-unscopables@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.tosorted@1.1.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-shim-unscopables@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/iterator.prototype@1.1.5",
      "dependsOn": [
        "pkg:npm/define-data-property@1.1.4",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/set-function-name@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/es-iterator-helpers@1.2.1",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-set-tostringtag@2.1.0",
        "pkg:npm/function-bind@1.1.2",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/globalthis@1.0.4",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-property-descriptors@1.0.2",
        "pkg:npm/has-proto@1.2.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/internal-slot@1.1.0",
        "pkg:npm/iterator.prototype@1.1.5",
        "pkg:npm/safe-array-concat@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/object.entries@1.1.8",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve@2.0.0-next.5",
      "dependsOn": [
        "pkg:npm/is-core-module@2.16.1",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.matchall@4.0.12",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.8",
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/internal-slot@1.1.0",
        "pkg:npm/regexp.prototype.flags@1.5.4",
        "pkg:npm/set-function-name@2.0.2",
        "pkg:npm/side-channel@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.repeat@1.0.0",
      "dependsOn": [
        "pkg:npm/define-properties@1.2.1",
        "pkg:npm/es-abstract@1.23.9"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-react@7.37.4",
      "dependsOn": [
        "pkg:npm/array-includes@3.1.8",
        "pkg:npm/array.prototype.findlast@1.2.5",
        "pkg:npm/array.prototype.flatmap@1.3.3",
        "pkg:npm/array.prototype.tosorted@1.1.4",
        "pkg:npm/doctrine@2.1.0",
        "pkg:npm/es-iterator-helpers@1.2.1",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/estraverse@5.3.0",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/jsx-ast-utils@3.3.5",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/object.entries@1.1.8",
        "pkg:npm/object.fromentries@2.0.8",
        "pkg:npm/object.values@1.2.1",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/resolve@2.0.0-next.5",
        "pkg:npm/semver@6.3.1",
        "pkg:npm/string.prototype.matchall@4.0.12",
        "pkg:npm/string.prototype.repeat@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-react-hooks@4.6.2",
      "dependsOn": [
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-testing-library@5.11.1",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/utils@5.62.0",
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-config-react-app@7.0.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/eslint-parser@7.26.10",
        "pkg:npm/@rushstack/eslint-patch@1.11.0",
        "pkg:npm/@typescript-eslint/eslint-plugin@5.62.0",
        "pkg:npm/@typescript-eslint/parser@5.62.0",
        "pkg:npm/babel-preset-react-app@10.1.0",
        "pkg:npm/confusing-browser-globals@1.0.11",
        "pkg:npm/eslint-plugin-flowtype@8.0.3",
        "pkg:npm/eslint-plugin-import@2.31.0",
        "pkg:npm/eslint-plugin-jest@25.7.0",
        "pkg:npm/eslint-plugin-jsx-a11y@6.10.2",
        "pkg:npm/eslint-plugin-react-hooks@4.6.2",
        "pkg:npm/eslint-plugin-react@7.37.4",
        "pkg:npm/eslint-plugin-testing-library@5.11.1",
        "pkg:npm/eslint@8.57.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-worker@28.1.3",
      "dependsOn": [
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/supports-color@8.1.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-webpack-plugin@3.2.0",
      "dependsOn": [
        "pkg:npm/@types/eslint@8.56.12",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/jest-worker@28.1.3",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/universalify@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@6.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@10.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/html-minifier-terser@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@2.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lower-case@2.0.2",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/no-case@3.0.4",
      "dependsOn": [
        "pkg:npm/lower-case@2.0.2",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/pascal-case@3.1.2",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/camel-case@4.1.2",
      "dependsOn": [
        "pkg:npm/pascal-case@3.1.2",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/clean-css@5.3.3",
      "dependsOn": [
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/commander@8.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-case@3.0.4",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/param-case@3.0.4",
      "dependsOn": [
        "pkg:npm/dot-case@3.0.4",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/relateurl@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/html-minifier-terser@6.1.0",
      "dependsOn": [
        "pkg:npm/camel-case@4.1.2",
        "pkg:npm/clean-css@5.3.3",
        "pkg:npm/commander@8.3.0",
        "pkg:npm/he@1.2.0",
        "pkg:npm/param-case@3.0.4",
        "pkg:npm/relateurl@0.2.7",
        "pkg:npm/terser@5.39.0"
      ]
    },
    {
      "ref": "pkg:npm/utila@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-converter@0.2.0",
      "dependsOn": [
        "pkg:npm/utila@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@6.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@4.3.1",
        "pkg:npm/domutils@2.8.0",
        "pkg:npm/entities@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/renderkid@3.0.0",
      "dependsOn": [
        "pkg:npm/css-select@4.3.0",
        "pkg:npm/dom-converter@0.2.0",
        "pkg:npm/htmlparser2@6.1.0",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pretty-error@4.0.0",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/renderkid@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/html-webpack-plugin@5.6.3",
      "dependsOn": [
        "pkg:npm/@types/html-minifier-terser@6.1.0",
        "pkg:npm/html-minifier-terser@6.1.0",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/pretty-error@4.0.0",
        "pkg:npm/tapable@2.3.0",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/harmony-reflect@1.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/identity-obj-proxy@3.0.0",
      "dependsOn": [
        "pkg:npm/harmony-reflect@1.6.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/stack-utils@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-is@17.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-format@27.5.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1",
        "pkg:npm/ansi-styles@5.2.0",
        "pkg:npm/react-is@17.0.2"
      ]
    },
    {
      "ref": "pkg:npm/stack-utils@2.0.6",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-message-util@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/stack-utils@2.0.3",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/pretty-format@27.5.1",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/stack-utils@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/@jest/console@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@bcoe/v8-coverage@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/collect-v8-coverage@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jest/test-result@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/console@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/collect-v8-coverage@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/exit@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@4.0.0",
      "dependsOn": [
        "pkg:npm/semver@7.5.4"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@3.0.1",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/make-dir@4.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "dependsOn": [
        "pkg:npm/debug@4.3.3",
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/html-escaper@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-reports@3.1.7",
      "dependsOn": [
        "pkg:npm/html-escaper@2.0.2",
        "pkg:npm/istanbul-lib-report@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-pnp-resolver@1.2.3",
      "dependsOn": [
        "pkg:npm/jest-resolve@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-get-type@27.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/leven@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-validate@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/leven@3.1.0",
        "pkg:npm/pretty-format@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve.exports@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-resolve@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-pnp-resolver@1.2.3",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-validate@27.5.1",
        "pkg:npm/resolve.exports@1.1.1",
        "pkg:npm/resolve@1.22.10",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/char-regex@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-length@4.0.2",
      "dependsOn": [
        "pkg:npm/char-regex@1.0.2",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-escapes@4.3.2",
      "dependsOn": [
        "pkg:npm/type-fest@0.21.3"
      ]
    },
    {
      "ref": "pkg:npm/supports-hyperlinks@2.3.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/terminal-link@2.1.1",
      "dependsOn": [
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/supports-hyperlinks@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/v8-to-istanbul@8.1.1",
      "dependsOn": [
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/source-map@0.7.4"
      ]
    },
    {
      "ref": "pkg:npm/@jest/reporters@27.5.1",
      "dependsOn": [
        "pkg:npm/@bcoe/v8-coverage@0.2.3",
        "pkg:npm/@jest/console@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/transform@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/collect-v8-coverage@1.0.2",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@7.1.3",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/istanbul-lib-instrument@5.2.1",
        "pkg:npm/istanbul-lib-report@3.0.1",
        "pkg:npm/istanbul-lib-source-maps@4.0.1",
        "pkg:npm/istanbul-reports@3.1.7",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-resolve@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-worker@27.5.1",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/string-length@4.0.2",
        "pkg:npm/terminal-link@2.1.1",
        "pkg:npm/v8-to-istanbul@8.1.1"
      ]
    },
    {
      "ref": "pkg:npm/emittery@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/throat@6.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-changed-files@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/execa@5.1.1",
        "pkg:npm/throat@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/type-detect@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@sinonjs/commons@1.8.6",
      "dependsOn": [
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/@sinonjs/fake-timers@8.1.0",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.6"
      ]
    },
    {
      "ref": "pkg:npm/jest-mock@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10"
      ]
    },
    {
      "ref": "pkg:npm/@jest/fake-timers@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@sinonjs/fake-timers@8.1.0",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-mock@27.5.1",
        "pkg:npm/jest-util@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/@jest/environment@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/fake-timers@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/jest-mock@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/diff-sequences@27.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-diff@27.5.1",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/diff-sequences@27.5.1",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/pretty-format@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-matcher-utils@27.5.1",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-diff@27.5.1",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/pretty-format@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/expect@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/jest-matcher-utils@27.5.1",
        "pkg:npm/jest-message-util@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/@jest/globals@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/expect@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/@jest/source-map@27.5.1",
      "dependsOn": [
        "pkg:npm/callsites@3.1.0",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/cjs-module-lexer@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/prettier@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-snapshot@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/generator@7.26.10",
        "pkg:npm/@babel/plugin-syntax-typescript@7.25.9",
        "pkg:npm/@babel/traverse@7.26.10",
        "pkg:npm/@babel/types@7.26.10",
        "pkg:npm/@jest/transform@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/babel__traverse@7.20.6",
        "pkg:npm/@types/prettier@2.7.3",
        "pkg:npm/babel-preset-current-node-syntax@1.1.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/expect@27.5.1",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-diff@27.5.1",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-matcher-utils@27.5.1",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/pretty-format@27.5.1",
        "pkg:npm/semver@7.5.4"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-runtime@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/fake-timers@27.5.1",
        "pkg:npm/@jest/globals@27.5.1",
        "pkg:npm/@jest/source-map@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/transform@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cjs-module-lexer@1.4.3",
        "pkg:npm/collect-v8-coverage@1.0.2",
        "pkg:npm/execa@5.1.1",
        "pkg:npm/glob@7.1.3",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-mock@27.5.1",
        "pkg:npm/jest-regex-util@27.5.1",
        "pkg:npm/jest-resolve@27.5.1",
        "pkg:npm/jest-snapshot@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/strip-bom@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jest/test-sequencer@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-runtime@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/co@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dedent@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-generator-fn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-each@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/pretty-format@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-circus@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/co@4.6.0",
        "pkg:npm/dedent@0.7.0",
        "pkg:npm/expect@27.5.1",
        "pkg:npm/is-generator-fn@2.1.0",
        "pkg:npm/jest-each@27.5.1",
        "pkg:npm/jest-matcher-utils@27.5.1",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-runtime@27.5.1",
        "pkg:npm/jest-snapshot@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/pretty-format@27.5.1",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/stack-utils@2.0.6",
        "pkg:npm/throat@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/abab@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@7.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-walk@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-globals@6.0.0",
      "dependsOn": [
        "pkg:npm/acorn-walk@7.2.0",
        "pkg:npm/acorn@7.4.1"
      ]
    },
    {
      "ref": "pkg:npm/cssom@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssom@0.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssstyle@2.3.0",
      "dependsOn": [
        "pkg:npm/cssom@0.3.8"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-mimetype@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tr46@2.1.0",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/webidl-conversions@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@8.7.0",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/tr46@2.1.0",
        "pkg:npm/webidl-conversions@6.1.0"
      ]
    },
    {
      "ref": "pkg:npm/data-urls@2.0.0",
      "dependsOn": [
        "pkg:npm/abab@2.0.6",
        "pkg:npm/whatwg-mimetype@2.3.0",
        "pkg:npm/whatwg-url@8.7.0"
      ]
    },
    {
      "ref": "pkg:npm/decimal.js@10.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domexception@2.0.1",
      "dependsOn": [
        "pkg:npm/webidl-conversions@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@3.0.4",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/es-set-tostringtag@2.1.0",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-encoding@1.0.5",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.24"
      ]
    },
    {
      "ref": "pkg:npm/html-encoding-sniffer@2.0.1",
      "dependsOn": [
        "pkg:npm/whatwg-encoding@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/@tootallnate/once@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/agent-base@6.0.2",
      "dependsOn": [
        "pkg:npm/debug@4.3.3"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy-agent@4.0.1",
      "dependsOn": [
        "pkg:npm/@tootallnate/once@1.1.2",
        "pkg:npm/agent-base@6.0.2",
        "pkg:npm/debug@4.3.3"
      ]
    },
    {
      "ref": "pkg:npm/https-proxy-agent@5.0.0",
      "dependsOn": [
        "pkg:npm/agent-base@6.0.2",
        "pkg:npm/debug@4.3.3"
      ]
    },
    {
      "ref": "pkg:npm/is-potential-custom-element-name@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nwsapi@2.2.18",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse5@6.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlchars@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/saxes@5.0.1",
      "dependsOn": [
        "pkg:npm/xmlchars@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/symbol-tree@3.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.15.0",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystringify@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse@1.5.10",
      "dependsOn": [
        "pkg:npm/querystringify@2.2.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tough-cookie@4.1.4",
      "dependsOn": [
        "pkg:npm/psl@1.15.0",
        "pkg:npm/punycode@2.3.1",
        "pkg:npm/universalify@0.2.0",
        "pkg:npm/url-parse@1.5.10"
      ]
    },
    {
      "ref": "pkg:npm/browser-process-hrtime@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/w3c-hr-time@1.0.2",
      "dependsOn": [
        "pkg:npm/browser-process-hrtime@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/xml-name-validator@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/w3c-xmlserializer@2.0.0",
      "dependsOn": [
        "pkg:npm/xml-name-validator@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ws@7.5.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdom@16.7.0",
      "dependsOn": [
        "pkg:npm/abab@2.0.6",
        "pkg:npm/acorn-globals@6.0.0",
        "pkg:npm/acorn@8.15.0",
        "pkg:npm/cssom@0.4.4",
        "pkg:npm/cssstyle@2.3.0",
        "pkg:npm/data-urls@2.0.0",
        "pkg:npm/decimal.js@10.5.0",
        "pkg:npm/domexception@2.0.1",
        "pkg:npm/escodegen@2.1.0",
        "pkg:npm/form-data@3.0.4",
        "pkg:npm/html-encoding-sniffer@2.0.1",
        "pkg:npm/http-proxy-agent@4.0.1",
        "pkg:npm/https-proxy-agent@5.0.0",
        "pkg:npm/is-potential-custom-element-name@1.0.1",
        "pkg:npm/nwsapi@2.2.18",
        "pkg:npm/parse5@6.0.1",
        "pkg:npm/saxes@5.0.1",
        "pkg:npm/symbol-tree@3.2.4",
        "pkg:npm/tough-cookie@4.1.4",
        "pkg:npm/w3c-hr-time@1.0.2",
        "pkg:npm/w3c-xmlserializer@2.0.0",
        "pkg:npm/webidl-conversions@6.1.0",
        "pkg:npm/whatwg-encoding@1.0.5",
        "pkg:npm/whatwg-mimetype@2.3.0",
        "pkg:npm/whatwg-url@8.7.0",
        "pkg:npm/ws@7.5.10",
        "pkg:npm/xml-name-validator@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-jsdom@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/fake-timers@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/jest-mock@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jsdom@16.7.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-node@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/fake-timers@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/jest-mock@27.5.1",
        "pkg:npm/jest-util@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-jasmine2@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/source-map@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/co@4.6.0",
        "pkg:npm/expect@27.5.1",
        "pkg:npm/is-generator-fn@2.1.0",
        "pkg:npm/jest-each@27.5.1",
        "pkg:npm/jest-matcher-utils@27.5.1",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-runtime@27.5.1",
        "pkg:npm/jest-snapshot@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/pretty-format@27.5.1",
        "pkg:npm/throat@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/detect-newline@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-docblock@27.5.1",
      "dependsOn": [
        "pkg:npm/detect-newline@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-leak-detector@27.5.1",
      "dependsOn": [
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/pretty-format@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-runner@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/console@27.5.1",
        "pkg:npm/@jest/environment@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/transform@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/emittery@0.8.1",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-docblock@27.5.1",
        "pkg:npm/jest-environment-jsdom@27.5.1",
        "pkg:npm/jest-environment-node@27.5.1",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-leak-detector@27.5.1",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-resolve@27.5.1",
        "pkg:npm/jest-runtime@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-worker@27.5.1",
        "pkg:npm/source-map-support@0.5.21",
        "pkg:npm/throat@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/jest-config@27.5.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@jest/test-sequencer@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/babel-jest@27.5.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/ci-info@3.9.0",
        "pkg:npm/deepmerge@4.3.1",
        "pkg:npm/glob@7.1.3",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-circus@27.5.1",
        "pkg:npm/jest-environment-jsdom@27.5.1",
        "pkg:npm/jest-environment-node@27.5.1",
        "pkg:npm/jest-get-type@27.5.1",
        "pkg:npm/jest-jasmine2@27.5.1",
        "pkg:npm/jest-regex-util@27.5.1",
        "pkg:npm/jest-resolve@27.5.1",
        "pkg:npm/jest-runner@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-validate@27.5.1",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/parse-json@5.2.0",
        "pkg:npm/pretty-format@27.5.1",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/strip-json-comments@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-resolve-dependencies@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/jest-regex-util@27.5.1",
        "pkg:npm/jest-snapshot@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-watcher@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/string-length@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@jest/core@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/console@27.5.1",
        "pkg:npm/@jest/reporters@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/transform@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/emittery@0.8.1",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jest-changed-files@27.5.1",
        "pkg:npm/jest-config@27.5.1",
        "pkg:npm/jest-haste-map@27.5.1",
        "pkg:npm/jest-message-util@27.5.1",
        "pkg:npm/jest-regex-util@27.5.1",
        "pkg:npm/jest-resolve-dependencies@27.5.1",
        "pkg:npm/jest-resolve@27.5.1",
        "pkg:npm/jest-runner@27.5.1",
        "pkg:npm/jest-runtime@27.5.1",
        "pkg:npm/jest-snapshot@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-validate@27.5.1",
        "pkg:npm/jest-watcher@27.5.1",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve-cwd@3.0.0",
      "dependsOn": [
        "pkg:npm/resolve-from@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/import-local@3.2.0",
      "dependsOn": [
        "pkg:npm/pkg-dir@4.2.0",
        "pkg:npm/resolve-cwd@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/kleur@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sisteransi@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prompts@2.4.2",
      "dependsOn": [
        "pkg:npm/kleur@3.0.3",
        "pkg:npm/sisteransi@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/cliui@7.0.4",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs-parser@20.2.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@16.2.0",
      "dependsOn": [
        "pkg:npm/cliui@7.0.4",
        "pkg:npm/escalade@3.2.0",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@20.2.9"
      ]
    },
    {
      "ref": "pkg:npm/jest-cli@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/core@27.5.1",
        "pkg:npm/@jest/test-result@27.5.1",
        "pkg:npm/@jest/types@27.5.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/import-local@3.2.0",
        "pkg:npm/jest-config@27.5.1",
        "pkg:npm/jest-util@27.5.1",
        "pkg:npm/jest-validate@27.5.1",
        "pkg:npm/prompts@2.4.2",
        "pkg:npm/yargs@16.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jest@27.5.1",
      "dependsOn": [
        "pkg:npm/@jest/core@27.5.1",
        "pkg:npm/import-local@3.2.0",
        "pkg:npm/jest-cli@27.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-regex-util@28.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@sinclair/typebox@0.24.51",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jest/schemas@28.1.3",
      "dependsOn": [
        "pkg:npm/@sinclair/typebox@0.24.51"
      ]
    },
    {
      "ref": "pkg:npm/@types/yargs@17.0.33",
      "dependsOn": [
        "pkg:npm/@types/yargs-parser@21.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@jest/types@28.1.3",
      "dependsOn": [
        "pkg:npm/@jest/schemas@28.1.3",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/@types/istanbul-reports@3.0.4",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/@types/yargs@17.0.33",
        "pkg:npm/chalk@4.1.2"
      ]
    },
    {
      "ref": "pkg:npm/react-is@18.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-format@28.1.3",
      "dependsOn": [
        "pkg:npm/@jest/schemas@28.1.3",
        "pkg:npm/ansi-regex@5.0.1",
        "pkg:npm/ansi-styles@5.2.0",
        "pkg:npm/react-is@18.3.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-message-util@28.1.3",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/@jest/types@28.1.3",
        "pkg:npm/@types/stack-utils@2.0.3",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/pretty-format@28.1.3",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/stack-utils@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/jest-util@28.1.3",
      "dependsOn": [
        "pkg:npm/@jest/types@28.1.3",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/ci-info@3.9.0",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/picomatch@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/@jest/console@28.1.3",
      "dependsOn": [
        "pkg:npm/@jest/types@28.1.3",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-message-util@28.1.3",
        "pkg:npm/jest-util@28.1.3",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jest/test-result@28.1.3",
      "dependsOn": [
        "pkg:npm/@jest/console@28.1.3",
        "pkg:npm/@jest/types@28.1.3",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/collect-v8-coverage@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/emittery@0.10.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-watcher@28.1.3",
      "dependsOn": [
        "pkg:npm/@jest/test-result@28.1.3",
        "pkg:npm/@jest/types@28.1.3",
        "pkg:npm/@types/node@22.13.10",
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/emittery@0.10.2",
        "pkg:npm/jest-util@28.1.3",
        "pkg:npm/string-length@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/slash@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/char-regex@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-length@5.0.1",
      "dependsOn": [
        "pkg:npm/char-regex@2.0.2",
        "pkg:npm/strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-watch-typeahead@1.1.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/jest-regex-util@28.0.2",
        "pkg:npm/jest-watcher@28.1.3",
        "pkg:npm/jest@27.5.1",
        "pkg:npm/slash@4.0.0",
        "pkg:npm/string-length@5.0.1",
        "pkg:npm/strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mini-css-extract-plugin@2.9.2",
      "dependsOn": [
        "pkg:npm/schema-utils@4.3.0",
        "pkg:npm/tapable@2.3.0",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-flexbugs-fixes@5.0.2",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/klona@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-loader@6.2.1",
      "dependsOn": [
        "pkg:npm/cosmiconfig@7.1.0",
        "pkg:npm/klona@2.0.6",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/normalize.css@12.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-browser-comments@4.0.0",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/sanitize.css@13.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-normalize@10.0.1",
      "dependsOn": [
        "pkg:npm/@csstools/normalize.css@12.1.1",
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/postcss-browser-comments@4.0.0",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/sanitize.css@13.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/selector-specificity@2.2.0",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-cascade-layers@1.1.1",
      "dependsOn": [
        "pkg:npm/@csstools/selector-specificity@2.2.0",
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-color-function@1.1.1",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-font-format-keywords@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-hwb-function@1.0.2",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-ic-unit@1.0.1",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-is-pseudo-class@2.0.7",
      "dependsOn": [
        "pkg:npm/@csstools/selector-specificity@2.2.0",
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-nested-calc@1.0.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-normalize-display-values@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-oklab-function@1.1.1",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-stepped-value-functions@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-text-decoration-shorthand@1.0.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-trigonometric-functions@1.0.2",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-unset-value@1.0.2",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/fraction.js@4.3.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-range@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/autoprefixer@10.4.21",
      "dependsOn": [
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/caniuse-lite@1.0.30001769",
        "pkg:npm/fraction.js@4.3.7",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/css-blank-pseudo@3.0.3",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/css-has-pseudo@3.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/css-prefers-color-scheme@6.0.3",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/cssdb@7.11.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-attribute-case-insensitive@5.0.2",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-clamp@4.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-color-functional-notation@4.2.4",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-color-hex-alpha@8.0.4",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-color-rebeccapurple@7.1.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-custom-media@8.0.2",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-custom-properties@12.1.11",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-custom-selectors@6.0.3",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-dir-pseudo-class@6.0.5",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-double-position-gradients@3.1.2",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-env-function@4.0.6",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-focus-visible@6.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-focus-within@5.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-font-variant@5.0.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-gap-properties@3.0.5",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-image-set-function@4.0.7",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-initial@4.0.1",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-lab-function@4.2.1",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-logical@5.0.4",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-media-minmax@5.0.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-nesting@10.2.0",
      "dependsOn": [
        "pkg:npm/@csstools/selector-specificity@2.2.0",
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-opacity-percentage@1.1.3",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-overflow-shorthand@3.0.4",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-page-break@3.0.4",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-place@7.0.5",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-pseudo-class-any-link@7.1.6",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
      "dependsOn": [
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-selector-not@6.0.1",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-preset-env@7.8.3",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-cascade-layers@1.1.1",
        "pkg:npm/@csstools/postcss-color-function@1.1.1",
        "pkg:npm/@csstools/postcss-font-format-keywords@1.0.1",
        "pkg:npm/@csstools/postcss-hwb-function@1.0.2",
        "pkg:npm/@csstools/postcss-ic-unit@1.0.1",
        "pkg:npm/@csstools/postcss-is-pseudo-class@2.0.7",
        "pkg:npm/@csstools/postcss-nested-calc@1.0.0",
        "pkg:npm/@csstools/postcss-normalize-display-values@1.0.1",
        "pkg:npm/@csstools/postcss-oklab-function@1.1.1",
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/@csstools/postcss-stepped-value-functions@1.0.1",
        "pkg:npm/@csstools/postcss-text-decoration-shorthand@1.0.0",
        "pkg:npm/@csstools/postcss-trigonometric-functions@1.0.2",
        "pkg:npm/@csstools/postcss-unset-value@1.0.2",
        "pkg:npm/autoprefixer@10.4.21",
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/css-blank-pseudo@3.0.3",
        "pkg:npm/css-has-pseudo@3.0.4",
        "pkg:npm/css-prefers-color-scheme@6.0.3",
        "pkg:npm/cssdb@7.11.2",
        "pkg:npm/postcss-attribute-case-insensitive@5.0.2",
        "pkg:npm/postcss-clamp@4.1.0",
        "pkg:npm/postcss-color-functional-notation@4.2.4",
        "pkg:npm/postcss-color-hex-alpha@8.0.4",
        "pkg:npm/postcss-color-rebeccapurple@7.1.1",
        "pkg:npm/postcss-custom-media@8.0.2",
        "pkg:npm/postcss-custom-properties@12.1.11",
        "pkg:npm/postcss-custom-selectors@6.0.3",
        "pkg:npm/postcss-dir-pseudo-class@6.0.5",
        "pkg:npm/postcss-double-position-gradients@3.1.2",
        "pkg:npm/postcss-env-function@4.0.6",
        "pkg:npm/postcss-focus-visible@6.0.4",
        "pkg:npm/postcss-focus-within@5.0.4",
        "pkg:npm/postcss-font-variant@5.0.0",
        "pkg:npm/postcss-gap-properties@3.0.5",
        "pkg:npm/postcss-image-set-function@4.0.7",
        "pkg:npm/postcss-initial@4.0.1",
        "pkg:npm/postcss-lab-function@4.2.1",
        "pkg:npm/postcss-logical@5.0.4",
        "pkg:npm/postcss-media-minmax@5.0.0",
        "pkg:npm/postcss-nesting@10.2.0",
        "pkg:npm/postcss-opacity-percentage@1.1.3",
        "pkg:npm/postcss-overflow-shorthand@3.0.4",
        "pkg:npm/postcss-page-break@3.0.4",
        "pkg:npm/postcss-place@7.0.5",
        "pkg:npm/postcss-pseudo-class-any-link@7.1.6",
        "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
        "pkg:npm/postcss-selector-not@6.0.1",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/core-js@3.41.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asap@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise@8.3.0",
      "dependsOn": [
        "pkg:npm/asap@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raf@3.4.1",
      "dependsOn": [
        "pkg:npm/performance-now@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.13.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-fetch@3.6.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-app-polyfill@3.0.0",
      "dependsOn": [
        "pkg:npm/core-js@3.41.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/promise@8.3.0",
        "pkg:npm/raf@3.4.1",
        "pkg:npm/regenerator-runtime@0.13.11",
        "pkg:npm/whatwg-fetch@3.6.20"
      ]
    },
    {
      "ref": "pkg:npm/address@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-port-alt@1.1.6",
      "dependsOn": [
        "pkg:npm/address@1.2.2",
        "pkg:npm/debug@2.6.9"
      ]
    },
    {
      "ref": "pkg:npm/filesize@8.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cosmiconfig@6.0.0",
      "dependsOn": [
        "pkg:npm/@types/parse-json@4.0.2",
        "pkg:npm/import-fresh@3.3.1",
        "pkg:npm/parse-json@5.2.0",
        "pkg:npm/path-type@4.0.0",
        "pkg:npm/yaml@1.10.3"
      ]
    },
    {
      "ref": "pkg:npm/at-least-node@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@9.1.0",
      "dependsOn": [
        "pkg:npm/at-least-node@1.0.0",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@2.7.0",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.14.0"
      ]
    },
    {
      "ref": "pkg:npm/tapable@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fork-ts-checker-webpack-plugin@6.5.3",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/@types/json-schema@7.0.15",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/chokidar@3.6.0",
        "pkg:npm/cosmiconfig@6.0.0",
        "pkg:npm/deepmerge@4.3.1",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/memfs@3.5.3",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/schema-utils@2.7.0",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/tapable@1.1.3",
        "pkg:npm/typescript@4.9.5",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/ini@1.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@6.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.3.1",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/global-prefix@3.0.0",
      "dependsOn": [
        "pkg:npm/ini@1.3.8",
        "pkg:npm/kind-of@6.0.3",
        "pkg:npm/which@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/global-modules@2.0.0",
      "dependsOn": [
        "pkg:npm/global-prefix@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/duplexer@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gzip-size@6.0.0",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/immer@9.0.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-root@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-utils@3.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-locate@3.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@3.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@3.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@3.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-up@3.1.0",
      "dependsOn": [
        "pkg:npm/find-up@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/react-error-overlay@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/recursive-readdir@2.2.3",
      "dependsOn": [
        "pkg:npm/minimatch@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/react-dev-utils@12.0.1",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.26.2",
        "pkg:npm/address@1.2.2",
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/detect-port-alt@1.1.6",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/filesize@8.0.7",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/fork-ts-checker-webpack-plugin@6.5.3",
        "pkg:npm/global-modules@2.0.0",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/gzip-size@6.0.0",
        "pkg:npm/immer@9.0.21",
        "pkg:npm/is-root@2.1.0",
        "pkg:npm/loader-utils@3.3.1",
        "pkg:npm/open@8.4.2",
        "pkg:npm/pkg-up@3.1.0",
        "pkg:npm/prompts@2.4.2",
        "pkg:npm/react-error-overlay@6.1.0",
        "pkg:npm/recursive-readdir@2.2.3",
        "pkg:npm/shell-quote@1.8.2",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/text-table@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/regex-parser@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/adjust-sourcemap-loader@4.0.0",
      "dependsOn": [
        "pkg:npm/loader-utils@2.0.4",
        "pkg:npm/regex-parser@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/picocolors@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss@7.0.39",
      "dependsOn": [
        "pkg:npm/picocolors@0.2.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve-url-loader@4.0.0",
      "dependsOn": [
        "pkg:npm/adjust-sourcemap-loader@4.0.0",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/loader-utils@2.0.4",
        "pkg:npm/postcss@7.0.39",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/sass-loader@12.6.0",
      "dependsOn": [
        "pkg:npm/klona@2.0.6",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/sass@1.86.0",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/source-map-loader@3.0.2",
      "dependsOn": [
        "pkg:npm/abab@2.0.6",
        "pkg:npm/iconv-lite@0.6.3",
        "pkg:npm/source-map-js@1.2.1",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/style-loader@3.3.4",
      "dependsOn": [
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/@alloc/quick-lru@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arg@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/didyoumean@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dlv@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jiti@1.21.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lilconfig@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-hash@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-cache@1.0.0",
      "dependsOn": [
        "pkg:npm/pify@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-import@15.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/read-cache@1.0.0",
        "pkg:npm/resolve@1.22.10"
      ]
    },
    {
      "ref": "pkg:npm/camelcase-css@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-js@4.0.1",
      "dependsOn": [
        "pkg:npm/camelcase-css@2.0.1",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/yaml@2.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-load-config@4.0.2",
      "dependsOn": [
        "pkg:npm/lilconfig@3.1.3",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/yaml@2.8.3"
      ]
    },
    {
      "ref": "pkg:npm/postcss-nested@6.2.0",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3"
      ]
    },
    {
      "ref": "pkg:npm/commander@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/any-promise@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/thenify@3.3.1",
      "dependsOn": [
        "pkg:npm/any-promise@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/thenify-all@1.6.0",
      "dependsOn": [
        "pkg:npm/thenify@3.3.1"
      ]
    },
    {
      "ref": "pkg:npm/mz@2.7.0",
      "dependsOn": [
        "pkg:npm/any-promise@1.3.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/thenify-all@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/ts-interface-checker@0.1.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sucrase@3.35.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.8",
        "pkg:npm/commander@4.1.1",
        "pkg:npm/glob@10.5.0",
        "pkg:npm/lines-and-columns@1.2.4",
        "pkg:npm/mz@2.7.0",
        "pkg:npm/pirates@4.0.6",
        "pkg:npm/ts-interface-checker@0.1.13"
      ]
    },
    {
      "ref": "pkg:npm/tailwindcss@3.4.17",
      "dependsOn": [
        "pkg:npm/@alloc/quick-lru@5.2.0",
        "pkg:npm/arg@5.0.2",
        "pkg:npm/chokidar@3.6.0",
        "pkg:npm/didyoumean@1.2.2",
        "pkg:npm/dlv@1.1.3",
        "pkg:npm/fast-glob@3.3.3",
        "pkg:npm/glob-parent@6.0.2",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/jiti@1.21.7",
        "pkg:npm/lilconfig@3.1.3",
        "pkg:npm/micromatch@4.0.8",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/object-hash@3.0.0",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/postcss-import@15.1.0",
        "pkg:npm/postcss-js@4.0.1",
        "pkg:npm/postcss-load-config@4.0.2",
        "pkg:npm/postcss-nested@6.2.0",
        "pkg:npm/postcss-selector-parser@6.1.2",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/resolve@1.22.10",
        "pkg:npm/sucrase@3.35.0"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-sources@2.3.1",
      "dependsOn": [
        "pkg:npm/source-list-map@2.0.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/webpack-manifest-plugin@4.1.1",
      "dependsOn": [
        "pkg:npm/tapable@2.3.0",
        "pkg:npm/webpack-sources@2.3.1",
        "pkg:npm/webpack@5.105.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-bytes@5.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/upath@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-sources@1.4.3",
      "dependsOn": [
        "pkg:npm/source-list-map@2.0.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/json-schema@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonpointer@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@apideck/better-ajv-errors@0.3.6",
      "dependsOn": [
        "pkg:npm/ajv@8.18.0",
        "pkg:npm/json-schema@0.4.0",
        "pkg:npm/jsonpointer@5.0.1",
        "pkg:npm/leven@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@rollup/plugin-babel@5.3.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/helper-module-imports@7.25.9",
        "pkg:npm/@rollup/pluginutils@3.1.0",
        "pkg:npm/@types/babel__core@7.20.5",
        "pkg:npm/rollup@2.80.0"
      ]
    },
    {
      "ref": "pkg:npm/builtin-modules@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/plugin-node-resolve@11.2.1",
      "dependsOn": [
        "pkg:npm/@rollup/pluginutils@3.1.0",
        "pkg:npm/@types/resolve@1.17.1",
        "pkg:npm/builtin-modules@3.3.0",
        "pkg:npm/deepmerge@4.3.1",
        "pkg:npm/is-module@1.0.0",
        "pkg:npm/resolve@1.22.10",
        "pkg:npm/rollup@2.80.0"
      ]
    },
    {
      "ref": "pkg:npm/magic-string@0.25.9",
      "dependsOn": [
        "pkg:npm/sourcemap-codec@1.4.8"
      ]
    },
    {
      "ref": "pkg:npm/@rollup/plugin-replace@2.4.2",
      "dependsOn": [
        "pkg:npm/@rollup/pluginutils@3.1.0",
        "pkg:npm/magic-string@0.25.9",
        "pkg:npm/rollup@2.80.0"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@5.1.9",
      "dependsOn": [
        "pkg:npm/brace-expansion@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/filelist@1.0.4",
      "dependsOn": [
        "pkg:npm/minimatch@5.1.9"
      ]
    },
    {
      "ref": "pkg:npm/jake@10.9.2",
      "dependsOn": [
        "pkg:npm/async@3.2.6",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/filelist@1.0.4",
        "pkg:npm/minimatch@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/ejs@3.1.10",
      "dependsOn": [
        "pkg:npm/jake@10.9.2"
      ]
    },
    {
      "ref": "pkg:npm/@surma/rollup-plugin-off-main-thread@2.2.3",
      "dependsOn": [
        "pkg:npm/ejs@3.1.10",
        "pkg:npm/json5@2.2.3",
        "pkg:npm/magic-string@0.25.9",
        "pkg:npm/string.prototype.matchall@4.0.12"
      ]
    },
    {
      "ref": "pkg:npm/common-tags@1.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.sortby@4.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tr46@1.0.1",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/webidl-conversions@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@7.1.0",
      "dependsOn": [
        "pkg:npm/lodash.sortby@4.7.0",
        "pkg:npm/tr46@1.0.1",
        "pkg:npm/webidl-conversions@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.8.0-beta.0",
      "dependsOn": [
        "pkg:npm/whatwg-url@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/get-own-enumerable-property-symbols@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-regexp@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringify-object@3.3.0",
      "dependsOn": [
        "pkg:npm/get-own-enumerable-property-symbols@3.0.2",
        "pkg:npm/is-obj@1.0.1",
        "pkg:npm/is-regexp@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/temp-dir@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.16.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/crypto-random-string@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-string@2.0.0",
      "dependsOn": [
        "pkg:npm/crypto-random-string@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tempy@0.6.0",
      "dependsOn": [
        "pkg:npm/is-stream@2.0.1",
        "pkg:npm/temp-dir@2.0.0",
        "pkg:npm/type-fest@0.16.0",
        "pkg:npm/unique-string@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/idb@7.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/workbox-core@6.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/workbox-background-sync@6.6.0",
      "dependsOn": [
        "pkg:npm/idb@7.1.1",
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-broadcast-update@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-cacheable-response@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-expiration@6.6.0",
      "dependsOn": [
        "pkg:npm/idb@7.1.1",
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-routing@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-strategies@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-google-analytics@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-background-sync@6.6.0",
        "pkg:npm/workbox-core@6.6.0",
        "pkg:npm/workbox-routing@6.6.0",
        "pkg:npm/workbox-strategies@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-navigation-preload@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-precaching@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0",
        "pkg:npm/workbox-routing@6.6.0",
        "pkg:npm/workbox-strategies@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-range-requests@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-recipes@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-cacheable-response@6.6.0",
        "pkg:npm/workbox-core@6.6.0",
        "pkg:npm/workbox-expiration@6.6.0",
        "pkg:npm/workbox-precaching@6.6.0",
        "pkg:npm/workbox-routing@6.6.0",
        "pkg:npm/workbox-strategies@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-streams@6.6.0",
      "dependsOn": [
        "pkg:npm/workbox-core@6.6.0",
        "pkg:npm/workbox-routing@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-sw@6.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/trusted-types@2.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/workbox-window@6.6.0",
      "dependsOn": [
        "pkg:npm/@types/trusted-types@2.0.7",
        "pkg:npm/workbox-core@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-build@6.6.0",
      "dependsOn": [
        "pkg:npm/@apideck/better-ajv-errors@0.3.6",
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@babel/preset-env@7.26.9",
        "pkg:npm/@babel/runtime@7.26.10",
        "pkg:npm/@rollup/plugin-babel@5.3.1",
        "pkg:npm/@rollup/plugin-node-resolve@11.2.1",
        "pkg:npm/@rollup/plugin-replace@2.4.2",
        "pkg:npm/@surma/rollup-plugin-off-main-thread@2.2.3",
        "pkg:npm/ajv@8.18.0",
        "pkg:npm/common-tags@1.8.2",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/pretty-bytes@5.6.0",
        "pkg:npm/rollup-plugin-terser@7.0.2",
        "pkg:npm/rollup@2.80.0",
        "pkg:npm/source-map@0.8.0-beta.0",
        "pkg:npm/stringify-object@3.3.0",
        "pkg:npm/strip-comments@2.0.1",
        "pkg:npm/tempy@0.6.0",
        "pkg:npm/upath@1.2.0",
        "pkg:npm/workbox-background-sync@6.6.0",
        "pkg:npm/workbox-broadcast-update@6.6.0",
        "pkg:npm/workbox-cacheable-response@6.6.0",
        "pkg:npm/workbox-core@6.6.0",
        "pkg:npm/workbox-expiration@6.6.0",
        "pkg:npm/workbox-google-analytics@6.6.0",
        "pkg:npm/workbox-navigation-preload@6.6.0",
        "pkg:npm/workbox-precaching@6.6.0",
        "pkg:npm/workbox-range-requests@6.6.0",
        "pkg:npm/workbox-recipes@6.6.0",
        "pkg:npm/workbox-routing@6.6.0",
        "pkg:npm/workbox-strategies@6.6.0",
        "pkg:npm/workbox-streams@6.6.0",
        "pkg:npm/workbox-sw@6.6.0",
        "pkg:npm/workbox-window@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/workbox-webpack-plugin@6.6.0",
      "dependsOn": [
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/pretty-bytes@5.6.0",
        "pkg:npm/upath@1.2.0",
        "pkg:npm/webpack-sources@1.4.3",
        "pkg:npm/webpack@5.105.0",
        "pkg:npm/workbox-build@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/react-scripts@5.0.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.16.5",
        "pkg:npm/@pmmmwh/react-refresh-webpack-plugin@0.5.15",
        "pkg:npm/@svgr/webpack@5.5.0",
        "pkg:npm/babel-jest@27.5.1",
        "pkg:npm/babel-loader@8.4.1",
        "pkg:npm/babel-plugin-named-asset-import@0.3.8",
        "pkg:npm/babel-preset-react-app@10.1.0",
        "pkg:npm/bfj@7.1.0",
        "pkg:npm/browserslist@4.28.1",
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
        "pkg:npm/css-loader@6.11.0",
        "pkg:npm/css-minimizer-webpack-plugin@3.4.1",
        "pkg:npm/dotenv-expand@5.1.0",
        "pkg:npm/dotenv@10.0.0",
        "pkg:npm/eslint-config-react-app@7.0.1",
        "pkg:npm/eslint-webpack-plugin@3.2.0",
        "pkg:npm/eslint@8.57.1",
        "pkg:npm/file-loader@6.2.0",
        "pkg:npm/fs-extra@10.1.0",
        "pkg:npm/fsevents@2.3.3",
        "pkg:npm/html-webpack-plugin@5.6.3",
        "pkg:npm/identity-obj-proxy@3.0.0",
        "pkg:npm/jest-resolve@27.5.1",
        "pkg:npm/jest-watch-typeahead@1.1.0",
        "pkg:npm/jest@27.5.1",
        "pkg:npm/mini-css-extract-plugin@2.9.2",
        "pkg:npm/postcss-flexbugs-fixes@5.0.2",
        "pkg:npm/postcss-loader@6.2.1",
        "pkg:npm/postcss-normalize@10.0.1",
        "pkg:npm/postcss-preset-env@7.8.3",
        "pkg:npm/postcss@8.5.3",
        "pkg:npm/prompts@2.4.2",
        "pkg:npm/react-app-polyfill@3.0.0",
        "pkg:npm/react-dev-utils@12.0.1",
        "pkg:npm/react-refresh@0.11.0",
        "pkg:npm/react@16.14.0",
        "pkg:npm/resolve-url-loader@4.0.0",
        "pkg:npm/resolve@1.22.10",
        "pkg:npm/sass-loader@12.6.0",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/source-map-loader@3.0.2",
        "pkg:npm/style-loader@3.3.4",
        "pkg:npm/tailwindcss@3.4.17",
        "pkg:npm/terser-webpack-plugin@5.4.0",
        "pkg:npm/typescript@4.9.5",
        "pkg:npm/webpack-dev-server@4.15.2",
        "pkg:npm/webpack-manifest-plugin@4.1.1",
        "pkg:npm/webpack@5.105.0",
        "pkg:npm/workbox-webpack-plugin@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/redux-devtools-instrument@1.9.6",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/symbol-observable@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/redux-devtools@3.5.0",
      "dependsOn": [
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-redux@4.4.10",
        "pkg:npm/react@16.14.0",
        "pkg:npm/redux-devtools-instrument@1.9.6",
        "pkg:npm/redux@3.7.2"
      ]
    },
    {
      "ref": "pkg:npm/core-js@2.6.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-runtime@6.26.0",
      "dependsOn": [
        "pkg:npm/core-js@2.6.5",
        "pkg:npm/regenerator-runtime@0.11.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-key@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._getnative@3.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.debounce@3.1.1",
      "dependsOn": [
        "pkg:npm/lodash._getnative@3.9.1"
      ]
    },
    {
      "ref": "pkg:npm/react-dock@0.2.4",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/lodash.debounce@3.1.1",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react@16.14.0"
      ]
    },
    {
      "ref": "pkg:npm/react-pure-render@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/redux-devtools-dock-monitor@1.1.3",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/parse-key@0.2.1",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-dock@0.2.4",
        "pkg:npm/react-pure-render@1.0.2",
        "pkg:npm/react@16.14.0",
        "pkg:npm/redux-devtools@3.5.0"
      ]
    },
    {
      "ref": "pkg:npm/base16@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.curry@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.flow@3.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pure-color@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-base16-styling@0.5.3",
      "dependsOn": [
        "pkg:npm/base16@1.0.0",
        "pkg:npm/lodash.curry@4.1.1",
        "pkg:npm/lodash.flow@3.5.0",
        "pkg:npm/pure-color@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/react-json-tree@0.11.2",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-base16-styling@0.5.3",
        "pkg:npm/react-dom@16.14.0",
        "pkg:npm/react@16.14.0"
      ]
    },
    {
      "ref": "pkg:npm/redux-devtools-themes@1.0.0",
      "dependsOn": [
        "pkg:npm/base16@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/redux-devtools-log-monitor@1.4.0",
      "dependsOn": [
        "pkg:npm/lodash.debounce@4.0.8",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-json-tree@0.11.2",
        "pkg:npm/react-pure-render@1.0.2",
        "pkg:npm/react@16.14.0",
        "pkg:npm/redux-devtools-themes@1.0.0",
        "pkg:npm/redux-devtools@3.5.0"
      ]
    },
    {
      "ref": "pkg:npm/fuzzball_demo@2.0.0",
      "dependsOn": [
        "pkg:npm/file-loader@6.2.0",
        "pkg:npm/fuzzball@2.2.0",
        "pkg:npm/gh-pages@5.0.0",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-dom@16.14.0",
        "pkg:npm/react-redux@4.4.10",
        "pkg:npm/react-router-redux@4.0.8",
        "pkg:npm/react-router@3.2.6",
        "pkg:npm/react-scripts@5.0.1",
        "pkg:npm/react@16.14.0",
        "pkg:npm/redux-devtools-dock-monitor@1.1.3",
        "pkg:npm/redux-devtools-log-monitor@1.4.0",
        "pkg:npm/redux-devtools@3.5.0",
        "pkg:npm/redux@3.7.2",
        "pkg:npm/sass@1.86.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/fuzzball@2.2.6"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-04T08:08:17Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'fuzzball' with version '2.2.6'. The application also has 1 child modules/components. The package type in this SBOM is npm with 32 purl namespaces described under components. The components were identified from the source files: demo-app/package-lock.json, package-lock.json."
    }
  ]
}