{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:fad61fb2-257d-4972-9e85-8bcd930ed6db",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-29T18:23:49Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "protractor",
      "group": "",
      "version": "5.4.4-tuxcare.2",
      "description": "Webdriver E2E test wrapper for Angular.",
      "purl": "pkg:npm/protractor@5.4.4-tuxcare.2",
      "bom-ref": "pkg:npm/protractor@5.4.4-tuxcare.2",
      "author": "Julie Ralph <ju.ralph@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "protractor, webdriver-manager"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "format, install_testapp, prepublish, pretest, start, test, website, compile_to_es5"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "website",
          "version": "0.0.1",
          "purl": "pkg:npm/website@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/website@0.0.1"
        },
        {
          "group": "",
          "name": "testapp",
          "version": "0.0.1",
          "purl": "pkg:npm/testapp@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/testapp@0.0.1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/angular/protractor"
        },
        {
          "type": "vcs",
          "url": "git://github.com/angular/protractor.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@angular\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json\\ntestapp/package-lock.json\\nwebsite/bower.json\\nwebsite/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "protractor-site",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/protractor-site@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/protractor-site@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/bower.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/bower.json"
              }
            ],
            "concludedValue": "website/bower.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "q",
      "version": "0.0.32",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd284e57c84f1325da702babfc82a5328190c0c5"
        }
      ],
      "purl": "pkg:npm/%40types/q@0.0.32",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/q/-/q-0.0.32.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/q@0.0.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/q/-/q-0.0.32.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/q"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "selenium-webdriver",
      "version": "3.0.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a4074247bfabc24752985100334cee208bf9572c4953e13c7ee837b6a5cfce6708b313d2d13624daf94f130452810ff9e7b4f9ebfcc3d21d29ce4f26e386a34"
        }
      ],
      "purl": "pkg:npm/%40types/selenium-webdriver@3.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/selenium-webdriver/-/selenium-webdriver-3.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/selenium-webdriver@3.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/selenium-webdriver/-/selenium-webdriver-3.0.10.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/selenium-webdriver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "blocking-proxy",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "284f0d14c66bde63761341dcbc2811b57ec38e188842bc257be9d2549542ff2a856fdfb1ce71e5d99728069d8bf6ace4238b78701149d5e7d717c0f08b5df644"
        }
      ],
      "purl": "pkg:npm/blocking-proxy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/blocking-proxy/-/blocking-proxy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blocking-proxy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/blocking-proxy/-/blocking-proxy-1.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "blocking-proxy,BPClient,blocking-proxy/BPClient"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/browser.js",
            "line": 3
          },
          {
            "location": "lib/browser.ts",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserstack",
      "version": "1.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bc54c4fae0ff4d38b86e2280f8627832c4151179f692751e107611bc97a1d9f55c6d53b8dcde6ea32ee7c5c0a03981a7fb7deb5f0764e74499ccc72a1bfa17a"
        }
      ],
      "purl": "pkg:npm/browserstack@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserstack/-/browserstack-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserstack@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserstack/-/browserstack-1.5.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "browserstack"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/driverProviders/browserStack.js",
            "line": 8
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 17
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-proxy-agent",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cf0934b52d6e756dcc8c61bc5420e3b81c43a5435ff5a9168559ccb1bf06aa512f5363cf1aa04b87518df792e021d5885555a0d084b66c9cf77e5cd01159995"
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "agent-base",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73e47f5395fedb3cf6f940ab085bfaa1d43325da2a23e61e72e8670092dad7361a31cd77ccf7f033066bafdd4f7750d8368ff23d16e23385957fdc2183016c22"
        }
      ],
      "purl": "pkg:npm/agent-base@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/agent-base/-/agent-base-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/agent-base/-/agent-base-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promisify",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5109d62f3e56ea967c4b63505aef08291c8a5203"
        }
      ],
      "purl": "pkg:npm/es6-promisify@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promisify/-/es6-promisify-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promisify@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promisify/-/es6-promisify-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "4.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd74d655260fae660b66f5e4b73ba96b38b62641a8360e37445ee3da1e567a46e56a82a69565f81809ea4420ab0bab075002b38fb42dd7cd12ea1867d3f0a41"
        }
      ],
      "purl": "pkg:npm/es6-promise@4.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@4.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de"
        }
      ],
      "purl": "pkg:npm/debug@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "535d045ce6b6363fa40117084629995e9df324c7"
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911"
        }
      ],
      "purl": "pkg:npm/glob@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "gulpfile.js",
            "line": 12
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine",
      "version": "2.8.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b089c0a11576b1f16df11b80146d91d4e8b8a3e"
        }
      ],
      "purl": "pkg:npm/jasmine@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine/-/jasmine-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine/-/jasmine-2.8.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/jasmine.js",
            "line": 62
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 62
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exit",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0632638f8d877cc82107d30a0fff1a17cba1cd0c"
        }
      ],
      "purl": "pkg:npm/exit@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exit@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-core",
      "version": "2.8.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcc979ae1f9fd05701e45e52e65d3a5d63f1a24e"
        }
      ],
      "purl": "pkg:npm/jasmine-core@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-core@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.8.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasminewd2",
      "version": "2.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e37cf0b17f199cce23bea71b2039395246b4ec4e"
        }
      ],
      "purl": "pkg:npm/jasminewd2@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasminewd2/-/jasminewd2-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasminewd2@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasminewd2/-/jasminewd2-2.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasminewd2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/jasmine.js",
            "line": 66
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 66
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "55705bcd93c5f3673530c2c2cbc0c2b3addc286e"
        }
      ],
      "purl": "pkg:npm/q@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.4.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "q,Promise,q/Promise,when,q/when"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/bpRunner.js",
            "line": 4
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/browserStack.js",
            "line": 3
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 10
          },
          {
            "location": "built/driverProviders/driverProvider.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/hosted.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/kobiton.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 13
          },
          {
            "location": "built/driverProviders/sauce.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/testObject.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/useExistingWebDriver.js",
            "line": 8
          },
          {
            "location": "built/frameworks/debugprint.js",
            "line": 2
          },
          {
            "location": "built/frameworks/explorer.js",
            "line": 1
          },
          {
            "location": "built/frameworks/jasmine.js",
            "line": 1
          },
          {
            "location": "built/frameworks/mocha.js",
            "line": 1
          },
          {
            "location": "built/launcher.js",
            "line": 8
          },
          {
            "location": "built/plugins.js",
            "line": 3
          },
          {
            "location": "built/runner.js",
            "line": 4
          },
          {
            "location": "built/taskRunner.js",
            "line": 5
          },
          {
            "location": "built/util.js",
            "line": 4
          },
          {
            "location": "lib/frameworks/debugprint.js",
            "line": 2
          },
          {
            "location": "lib/frameworks/explorer.js",
            "line": 1
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 1
          },
          {
            "location": "lib/frameworks/mocha.js",
            "line": 1
          },
          {
            "location": "scripts/interactive_tests/interactive_test_util.js",
            "line": 2
          },
          {
            "location": "spec/onPrepare/asyncstartup.js",
            "line": 1
          },
          {
            "location": "spec/plugins/plugins/async_plugin.js",
            "line": 1
          },
          {
            "location": "spec/plugins/plugins/failing_plugin.js",
            "line": 1
          },
          {
            "location": "lib/bpRunner.ts",
            "line": 2
          },
          {
            "location": "lib/bpRunner.ts",
            "line": 18
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 31
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 36
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 75
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 84
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 8
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 46
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 97
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 117
          },
          {
            "location": "lib/driverProviders/hosted.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/hosted.ts",
            "line": 27
          },
          {
            "location": "lib/driverProviders/kobiton.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/kobiton.ts",
            "line": 24
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 11
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 158
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 38
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 50
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 60
          },
          {
            "location": "lib/driverProviders/testObject.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/testObject.ts",
            "line": 24
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 29
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 34
          },
          {
            "location": "lib/launcher.ts",
            "line": 6
          },
          {
            "location": "lib/launcher.ts",
            "line": 114
          },
          {
            "location": "lib/launcher.ts",
            "line": 126
          },
          {
            "location": "lib/launcher.ts",
            "line": 246
          },
          {
            "location": "lib/plugins.ts",
            "line": 1
          },
          {
            "location": "lib/plugins.ts",
            "line": 482
          },
          {
            "location": "lib/plugins.ts",
            "line": 511
          },
          {
            "location": "lib/runner.ts",
            "line": 2
          },
          {
            "location": "lib/runner.ts",
            "line": 119
          },
          {
            "location": "lib/runner.ts",
            "line": 123
          },
          {
            "location": "lib/runner.ts",
            "line": 384
          },
          {
            "location": "lib/runner.ts",
            "line": 441
          },
          {
            "location": "lib/runner.ts",
            "line": 468
          },
          {
            "location": "lib/taskRunner.ts",
            "line": 3
          },
          {
            "location": "lib/taskRunner.ts",
            "line": 68
          },
          {
            "location": "lib/util.ts",
            "line": 2
          },
          {
            "location": "lib/util.ts",
            "line": 39
          },
          {
            "location": "lib/util.ts",
            "line": 48
          }
        ]
      }
    },
    {
      "group": "",
      "name": "saucelabs",
      "version": "1.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e55f7146756bd87f84372c57c5592d50bcf8372060865b121cf1004574f4dba53267b7fbf5ec51d7615027ec2f2c1dfd72517a3673bc883348ac0ebc9f62d1d"
        }
      ],
      "purl": "pkg:npm/saucelabs@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/saucelabs/-/saucelabs-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/saucelabs@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/saucelabs/-/saucelabs-1.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "saucelabs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/driverProviders/sauce.js",
            "line": 12
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 16
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selenium-webdriver",
      "version": "3.6.0-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddf5bdb14d537c4af31854fda8b52bc1ebd79d53a4bd0dc31f9f623cd8f06ec35dd4afb3a6f4cdae6ee0c6280481bfbf13d5e272b9c80103572cfd5e0ad273ab"
        }
      ],
      "purl": "pkg:npm/selenium-webdriver@3.6.0-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/selenium-webdriver/-/selenium-webdriver-3.6.0-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/selenium-webdriver@3.6.0-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/selenium-webdriver/-/selenium-webdriver-3.6.0-tuxcare.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "selenium-webdriver,ActionSequence,selenium-webdriver/ActionSequence,Browser,selenium-webdriver/Browser,Builder,selenium-webdriver/Builder,Button,selenium-webdriver/Button,Capabilities,selenium-webdriver/Capabilities,Capability,selenium-webdriver/Capability,error,selenium-webdriver/error,EventEmitter,selenium-webdriver/EventEmitter,FileDetector,selenium-webdriver/FileDetector,selenium-webdriver/Key,logging,selenium-webdriver/logging,promise,selenium-webdriver/promise,Session,selenium-webdriver/Session,until,selenium-webdriver/until,WebElement,selenium-webdriver/WebElement,WebElementPromise,selenium-webdriver/WebElementPromise"
        },
        {
          "name": "ImportedModules",
          "value": "selenium-webdriver,selenium-webdriver/lib/command,selenium-webdriver/http,selenium-webdriver/chrome,selenium-webdriver/firefox,selenium-webdriver/remote,selenium-webdriver/testing,selenium-webdriver/lib/session,ActionSequence,selenium-webdriver/ActionSequence,selenium-webdriver/By,Capabilities,selenium-webdriver/Capabilities,Command,selenium-webdriver/Command,FileDetector,selenium-webdriver/FileDetector,ICommandName,selenium-webdriver/ICommandName,Navigation,selenium-webdriver/Navigation,Options,selenium-webdriver/Options,promise,selenium-webdriver/promise,Session,selenium-webdriver/Session,TargetLocator,selenium-webdriver/TargetLocator,TouchSequence,selenium-webdriver/TouchSequence,until,selenium-webdriver/until,WebDriver,selenium-webdriver/WebDriver,WebElement,selenium-webdriver/WebElement,WebElementPromise,selenium-webdriver/WebElementPromise,Driver,selenium-webdriver/chrome/Driver,ServiceBuilder,selenium-webdriver/chrome/ServiceBuilder,selenium-webdriver/firefox/Driver,Builder,selenium-webdriver/Builder,error,selenium-webdriver/error,ILocation,selenium-webdriver/ILocation,ISize,selenium-webdriver/ISize,ByHash,selenium-webdriver/ByHash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/browser.js",
            "line": 4
          },
          {
            "location": "built/browser.js",
            "line": 14
          },
          {
            "location": "built/browser.js",
            "line": 15
          },
          {
            "location": "built/browser.js",
            "line": 27
          },
          {
            "location": "built/browser.js",
            "line": 28
          },
          {
            "location": "built/debugger.js",
            "line": 4
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 9
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 12
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 11
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 12
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 76
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 100
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 104
          },
          {
            "location": "built/driverProviders/driverProvider.js",
            "line": 9
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 18
          },
          {
            "location": "built/driverProviders/useExistingWebDriver.js",
            "line": 9
          },
          {
            "location": "built/driverProviders/useExistingWebDriver.js",
            "line": 12
          },
          {
            "location": "built/element.js",
            "line": 3
          },
          {
            "location": "built/expectedConditions.js",
            "line": 3
          },
          {
            "location": "built/frameworks/jasmine.js",
            "line": 2
          },
          {
            "location": "built/frameworks/mocha.js",
            "line": 26
          },
          {
            "location": "built/index.js",
            "line": 4
          },
          {
            "location": "built/index.js",
            "line": 37
          },
          {
            "location": "built/index.js",
            "line": 38
          },
          {
            "location": "built/index.js",
            "line": 39
          },
          {
            "location": "built/index.js",
            "line": 41
          },
          {
            "location": "built/index.js",
            "line": 42
          },
          {
            "location": "built/locators.js",
            "line": 3
          },
          {
            "location": "built/plugins.js",
            "line": 4
          },
          {
            "location": "built/ptor.js",
            "line": 3
          },
          {
            "location": "built/ptor.js",
            "line": 4
          },
          {
            "location": "built/ptor.js",
            "line": 5
          },
          {
            "location": "built/ptor.js",
            "line": 6
          },
          {
            "location": "built/ptor.js",
            "line": 7
          },
          {
            "location": "built/ptor.js",
            "line": 40
          },
          {
            "location": "built/ptor.js",
            "line": 41
          },
          {
            "location": "built/runner.js",
            "line": 5
          },
          {
            "location": "built/util.js",
            "line": 5
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 2
          },
          {
            "location": "lib/frameworks/mocha.js",
            "line": 26
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 2
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 3
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 6
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 9
          },
          {
            "location": "spec/driverProviderUseExistingWebDriver.js",
            "line": 2
          },
          {
            "location": "lib/browser.ts",
            "line": 2
          },
          {
            "location": "lib/browser.ts",
            "line": 16
          },
          {
            "location": "lib/browser.ts",
            "line": 17
          },
          {
            "location": "lib/browser.ts",
            "line": 33
          },
          {
            "location": "lib/browser.ts",
            "line": 34
          },
          {
            "location": "lib/browser.ts",
            "line": 202
          },
          {
            "location": "lib/browser.ts",
            "line": 207
          },
          {
            "location": "lib/browser.ts",
            "line": 212
          },
          {
            "location": "lib/browser.ts",
            "line": 424
          },
          {
            "location": "lib/browser.ts",
            "line": 429
          },
          {
            "location": "lib/browser.ts",
            "line": 436
          },
          {
            "location": "lib/browser.ts",
            "line": 638
          },
          {
            "location": "lib/browser.ts",
            "line": 700
          },
          {
            "location": "lib/browser.ts",
            "line": 707
          },
          {
            "location": "lib/browser.ts",
            "line": 874
          },
          {
            "location": "lib/browser.ts",
            "line": 953
          },
          {
            "location": "lib/browser.ts",
            "line": 1104
          },
          {
            "location": "lib/browser.ts",
            "line": 1172
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 14
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 43
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 54
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 8
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 9
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 10
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 11
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 89
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 117
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 122
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 78
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 98
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 20
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 8
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 14
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 55
          },
          {
            "location": "lib/element.ts",
            "line": 1
          },
          {
            "location": "lib/element.ts",
            "line": 181
          },
          {
            "location": "lib/element.ts",
            "line": 243
          },
          {
            "location": "lib/element.ts",
            "line": 282
          },
          {
            "location": "lib/element.ts",
            "line": 382
          },
          {
            "location": "lib/element.ts",
            "line": 484
          },
          {
            "location": "lib/element.ts",
            "line": 659
          },
          {
            "location": "lib/element.ts",
            "line": 661
          },
          {
            "location": "lib/element.ts",
            "line": 708
          },
          {
            "location": "lib/element.ts",
            "line": 882
          },
          {
            "location": "lib/element.ts",
            "line": 1028
          },
          {
            "location": "lib/element.ts",
            "line": 1070
          },
          {
            "location": "lib/element.ts",
            "line": 1164
          },
          {
            "location": "lib/expectedConditions.ts",
            "line": 1
          },
          {
            "location": "lib/index.ts",
            "line": 8
          },
          {
            "location": "lib/index.ts",
            "line": 20
          },
          {
            "location": "lib/index.ts",
            "line": 21
          },
          {
            "location": "lib/index.ts",
            "line": 22
          },
          {
            "location": "lib/index.ts",
            "line": 25
          },
          {
            "location": "lib/index.ts",
            "line": 26
          },
          {
            "location": "lib/locators.ts",
            "line": 1
          },
          {
            "location": "lib/locators.ts",
            "line": 137
          },
          {
            "location": "lib/locators.ts",
            "line": 169
          },
          {
            "location": "lib/locators.ts",
            "line": 197
          },
          {
            "location": "lib/locators.ts",
            "line": 222
          },
          {
            "location": "lib/locators.ts",
            "line": 247
          },
          {
            "location": "lib/locators.ts",
            "line": 261
          },
          {
            "location": "lib/locators.ts",
            "line": 271
          },
          {
            "location": "lib/locators.ts",
            "line": 282
          },
          {
            "location": "lib/locators.ts",
            "line": 298
          },
          {
            "location": "lib/locators.ts",
            "line": 309
          },
          {
            "location": "lib/locators.ts",
            "line": 426
          },
          {
            "location": "lib/locators.ts",
            "line": 460
          },
          {
            "location": "lib/locators.ts",
            "line": 492
          },
          {
            "location": "lib/plugins.ts",
            "line": 2
          },
          {
            "location": "lib/ptor.ts",
            "line": 1
          },
          {
            "location": "lib/ptor.ts",
            "line": 2
          },
          {
            "location": "lib/ptor.ts",
            "line": 3
          },
          {
            "location": "lib/ptor.ts",
            "line": 4
          },
          {
            "location": "lib/ptor.ts",
            "line": 5
          },
          {
            "location": "lib/ptor.ts",
            "line": 54
          },
          {
            "location": "lib/ptor.ts",
            "line": 55
          },
          {
            "location": "lib/runner.ts",
            "line": 3
          },
          {
            "location": "lib/runner.ts",
            "line": 51
          },
          {
            "location": "lib/runner.ts",
            "line": 172
          },
          {
            "location": "lib/runner.ts",
            "line": 289
          },
          {
            "location": "lib/util.ts",
            "line": 3
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "jszip",
      "version": "3.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de5fab6f5e48396b54854d07e4c16a112fd3e8a87b69b6308e8b017b2fef0fa843b7cce811f7e4482e56b39486b60570de0071d8d11b8537925b5fa45a4a724d"
        }
      ],
      "purl": "pkg:npm/jszip@3.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jszip/-/jszip-3.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jszip@3.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jszip/-/jszip-3.10.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lie",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51a88c27379646512e8f302ec392e8918d4be5e70d41864a7e6c99f4bef00c76ffa797ad29ac5786884172bc341186f2f86fcd039daf452378377f5dc47008c1"
        }
      ],
      "purl": "pkg:npm/lie@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/lie/-/lie-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lie@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/lie/-/lie-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "immediate",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d7385b72a838cd0c043155f631b85ee0f4897f21b5a69a5420d8c60a387f04c484f5aa0eb1738cf24b71da10401382cd5bb5fcf1ab5e5c894898ee08d25d119"
        }
      ],
      "purl": "pkg:npm/immediate@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/immediate/-/immediate-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immediate@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/immediate/-/immediate-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e212c1f0fcb8cd971ee6ce3277d5f3a29ab056fff218d855d4197c353982ab5efadc778adbe130553bfe95e19e2f5dc39e1db07dbaa8c153d70883b4cf8b5a63"
        }
      ],
      "purl": "pkg:npm/pako@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pako/-/pako-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pako/-/pako-1.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/readable-stream/-/readable-stream-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/readable-stream/-/readable-stream-2.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/string_decoder/-/string_decoder-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/string_decoder/-/string_decoder-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setimmediate",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3004c9759a7cb0ba8397febc2df4266cff3328f2d0355e81219a0882bb1c14343e46cbcafc1c5e0d03a0cb128aa21d32ffc87706a5459c2a90fe077eade8885c"
        }
      ],
      "purl": "pkg:npm/setimmediate@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setimmediate@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96800093cbf1a0c86bd95b4625467535c29dfa04"
        }
      ],
      "purl": "pkg:npm/rimraf@2.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.30-tuxcare.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b51d62690aacb3f25ab7794670c9baf0839136c83cebc2a337fa39a50ec1059c2b4ab9a906803d41088f67b08656cd7e048b799cbf07b9a000f6c1333cddc63a"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.30-tuxcare.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tmp/-/tmp-0.0.30-tuxcare.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.30-tuxcare.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tmp/-/tmp-0.0.30-tuxcare.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f6151d37562afb148bb8e57058db49936fefd9496074d2c8d4f637505edf37803ac8e19b73e45b3bff2cbbe20d8de52550638c58d6a0ebe2b35d770611557d2"
        },
        {
          "alg": "SHA-1",
          "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274"
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.4.23-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf0cf27bf35d05fc211a152b019924b2cc7c3e8692c71559ba94690ffaa5e7788e6887c962c97439fefbc43b4d203e0f5790e51ca304c434a4669078588d7aba"
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.23-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xml2js/-/xml2js-0.4.23-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.23-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xml2js/-/xml2js-0.4.23-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e36b415702d69da42f5b9cdce076d9ad3b9671c1020997c18bdd850eec2dab16ac1fe25b3c1dff14e29bd66db6d8ae364785b1bb1cf332c4ecc1fce0b52bbae1"
        }
      ],
      "purl": "pkg:npm/sax@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/sax/-/sax-1.6.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/sax/-/sax-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "11.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c396c23f905131ee02ef6de71cd3fa212c6e747ee810a7caf21f3313b96f6f49ad462745d858a9e1b14c7ba227b71bdf3eaf9e9a4d0214078921b78d91dc9bc"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@11.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@11.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.4.18",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6bcb4fc9ab13cb17d9ce8ef4ad6bbb55a277643f97708322c38d5a323039668ee813da5459d4e7ecad84e409dda19039c94ca45b3bf465de8ae6f2f96c5336c"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.4.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.4.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "source-map-support"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/runner.js",
            "line": 173
          },
          {
            "location": "lib/runner.ts",
            "line": 202
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webdriver-js-extender",
      "version": "2.1.0-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6d43cfd4b322ea36bea8cc4bf6c0ea2e1c4a57b7adbaa89132d0fdf56d70bdfcef0ea6158cc8ed0d5a7b61f90866fe00d6f0c00cfe61160f97c891e2a63f71e"
        }
      ],
      "purl": "pkg:npm/webdriver-js-extender@2.1.0-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/webdriver-js-extender/-/webdriver-js-extender-2.1.0-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webdriver-js-extender@2.1.0-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/webdriver-js-extender/-/webdriver-js-extender-2.1.0-tuxcare.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "webdriver-js-extender,extend,webdriver-js-extender/extend,ExtendedWebDriver,webdriver-js-extender/ExtendedWebDriver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/browser.js",
            "line": 6
          },
          {
            "location": "lib/browser.ts",
            "line": 4
          },
          {
            "location": "lib/browser.ts",
            "line": 337
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "webdriver-manager",
      "version": "12.1.9-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b611ce40541add9c32965eff96b5104798722b270473969e235ee05dffef6465c92ded3f9abf67ac3cd851b606d258af6ea946d39140eeeca5126014bf659c80"
        }
      ],
      "purl": "pkg:npm/webdriver-manager@12.1.9-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/webdriver-manager/-/webdriver-manager-12.1.9-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webdriver-manager@12.1.9-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/webdriver-manager/-/webdriver-manager-12.1.9-tuxcare.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "webdriver-manager/built/lib/config"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/driverProviders/direct.js",
            "line": 16
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 17
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 19
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 19
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "adm-zip",
      "version": "0.5.18-tuxcare.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e51eb313dbe58f695c1853a90eb2fd259f40b4dcdaffec0bce4e112ec9965e99418f7f49f8b09b67366c43270a709c577d3d27d3aa0bbc584974d0ad9adee3d2"
        }
      ],
      "purl": "pkg:npm/adm-zip@0.5.18-tuxcare.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/adm-zip/-/adm-zip-0.5.18-tuxcare.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/adm-zip@0.5.18-tuxcare.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/adm-zip/-/adm-zip-0.5.18-tuxcare.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "2.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6787f3a5b2118cebbb94ee630844d25a8a940d57b420f3a57ee801b05eacb9e9f62ca0e555be1066928433d3fe6ee349e0a23578dec8d3cdf0fe96ca529b2b59"
        }
      ],
      "purl": "pkg:npm/del@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/del/-/del-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/del/-/del-2.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "del"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c9453207d84787e3891af8b5a283e12a4f638d498a5594d7f1ea9c9de7ddbf545d536df96327b7a5c227bba12c1c5622c6a8e756a1c49dbb6b71c0117d6e399"
        }
      ],
      "purl": "pkg:npm/globby@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/globby/-/globby-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/globby/-/globby-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f1afa4098ff45d53f8426818ce7f15beaba972b9513a245588ac0529b8e3a1a0926843df5c527de2811687541e4ff56ae015537415f02b337c7472e78e53c9e"
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc26337b1f4cf451908c218c1b28baff7d5cf0625b81bd2a1b2af1e475b13ddd1a0b0878701d988cc6f65dff54ba8a20accae53bd713aa7079ac8e461d94dc50"
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        },
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9d82c018f9f4e7befee423b69ac5bab058d6f4007881d2a04ef3d3d928f9284e618e81d6eb1c3283fb40765f8b937c9fc54f5474f6bf604ec8d48cd268b6ea2"
        },
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d069e2e83e1470b4dbbfd739ec37f10c676be355df8148ea599bb8f767f47081abd7acc3534e8158ffd1004bceba8ec243408d8c768b94ce7d6092459b735697"
        },
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32752e1327007a6b5269e1528d7296fdaae857b6a405b63e4aff91932a858e001eef717e311d130562814439267d6abf1e216675abdf6751bb87848f6576824a"
        },
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/pinkie/-/pinkie-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7274b9e9e47d48f02c70befb8a4efa01356aa0f0114ea3c856430357145a587d3acd3fbaf82cc8ae8611274555be6d19d737c0bf1bf3f62fc3dcfa636aab7937"
        },
        {
          "alg": "SHA-1",
          "content": "d225ec23132e89edd38fda767472e62e65f1106d"
        }
      ],
      "purl": "pkg:npm/is-path-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-in-cwd",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1635754535b8f04ec258cede13f276349bc010455e92d79c0c15411391e1de733525dd24be11ed5faf0faf7c6c0dff39ef1b77638024c1550b2b5564bbad9a69"
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-path-in-cwd/-/is-path-in-cwd-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-in-cwd@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-path-in-cwd/-/is-path-in-cwd-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ef5b7de50437a3fdca6b4e865ef7aa55cb48036"
        }
      ],
      "purl": "pkg:npm/is-path-inside@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-inside",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "365417dede44430d1c11af61027facf074bdfc53"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-inside@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45963986e20a08c4560d4a999448bbd9ffe599728cbeeb3370c05dba5890de79d66f1f57fd90503bb0e28cc1184bd1211c16f6a9a71150cb42eecbcbc1ed2573"
        }
      ],
      "purl": "pkg:npm/ini@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.8-tuxcare.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea39bef4634e4f3210a2342768b1f539ab1dd438b7d4c6f3e64695a9db3f376de2bf8340aa31e348bac54033268cefc0dff212234294452d91ff13e511e7e7e5"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8-tuxcare.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-1.2.8-tuxcare.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8-tuxcare.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-1.2.8-tuxcare.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.2-tuxcare.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74d925b7c0b9951a0e6cf82e224d79323d3fd96e3ff6809c12a2f3d59afb60ec05468e4a9096008e2719297d509d5146ac074366e2d8f8a5e4121cd320ac4f73"
        }
      ],
      "purl": "pkg:npm/request@2.88.2-tuxcare.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/request/-/request-2.88.2-tuxcare.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.2-tuxcare.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/request/-/request-2.88.2-tuxcare.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3c91c1aa9d87ff6268e84617f1caef822f106352d1cb5cb5d7fef51fc7d9762d8cc6ddcd66eb59eba72154648eb3792f8b8bfc1630c89d0fd2a0aeab46ab798"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9477badb3bdb4c1e5e100054562fc0c1587464a63dacc3038669be79ecaeb9441b437f89f9f38d550399ca3f8376bbc3e01637dee6278b2449e142486922807f"
        }
      ],
      "purl": "pkg:npm/aws4@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws4/-/aws4-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws4/-/aws4-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2d605ca27da15f19a72888e6e325e828964c12538c503466d581488d6155316d0db1da552c16f638855815cc68887ba58b38fab27165c0e3497e3d6b31b6153"
        },
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/caseless/-/caseless-0.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        },
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/extend/-/extend-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/extend/-/extend-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f428b60f866eb379a738973de8277a3ae6abe040270fb9b8b2a2d66b5ea11a1b884d6a03583bca9d954ad7e6fc2abfda21a9e4ff6778fafb25b4ebbc9659d53"
        },
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/forever-agent/-/forever-agent-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3-tuxcare.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef869cd1695e8e332122dc06462472315bd7274589086c7e726b783a9afdd6686accf617f83710464eec7e149792b68dbff6589cff5acf8efc2e817d069ecb90"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3-tuxcare.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/form-data/-/form-data-2.3.3-tuxcare.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3-tuxcare.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/form-data/-/form-data-2.3.3-tuxcare.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        },
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09d7a393f03e995a79f8af857b70a9e0ab16557a"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.30.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "74c643da2dd9d6a45399963465b26d5ca7d71f01"
        }
      ],
      "purl": "pkg:npm/mime-db@1.30.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.30.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e64f64f49658dbc5d4197eca6c9e8f6182b1b7522afa2ace5a7e2b26eb6a68c6a04ceac0e7304b8f9b34eaf17374384c2a28b2dd8758d0237ab213ae8dcdbdf"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e0171ec77e8abad32b4ad9cec386717c8c8bf362038cc5fba08cb3923078cb20f81e9ea6bb4bba1a6a001352af7d995e8862f376b51982d309d3617ea23db33"
        }
      ],
      "purl": "pkg:npm/ajv@6.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ajv/-/ajv-6.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ajv/-/ajv-6.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16"
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/punycode/-/punycode-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/punycode/-/punycode-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa96ecface1197f1cc9169342514c3f0f346d22551b6c7f7056fc64f85420b1a01e46bd4aca24082390829bde78f7abaa27593ab4f5e22a6a7c96fb20b716e5"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0806e7afa473e0261090b614b52357c503d41f680af1fde259ec5596c9cc783f868e5b10d17b32d5c397fa637776dc58a26472db50a23b353c521c3a3b09dc11"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35f27853304271018b0e542aee71f11feb6fde4c99d211d0a85e413ba27bb4d25e3f9768d6594fafc759f331e89df840bb43c701d3244a8fbca34c3183d9595b"
        },
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assert-plus/-/assert-plus-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f66d238c01cfdc88bcfa0f38235651893fdf81ac95aee540c62bbd02da2c1e0b940121e15fd195d1bc68c48f6b9882b63632400086c4961c35a516d12ba195b"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsprim/-/jsprim-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsprim/-/jsprim-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7535dcfb36ffa6bc00b58f492d4daedf01bd2f2f21865feacc1cd05842f8900c65341f0ee585cb4900da9b3e1bbd9d5f7f8b34ff227b53819ec89bff4b26cf6"
        },
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/extsprintf/-/extsprintf-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7acf783379d321fb043e2b1169f6a4f870cb7c75e7281855def5397aa3dc4b77e5216a9cc495a05c75e27b2dd8ae968db1a9d8e5e8b55686046cece28eeabd04"
        }
      ],
      "purl": "pkg:npm/json-schema@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65929298300414e8a311104b92661f27ebe6937c3eee138b603364442b91b8c246126a9834234bc81045c162953217f068417758e774665c3ce94fd60bffa763"
        },
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/verror/-/verror-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/verror/-/verror-1.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da9d8a2594d2a90fc8dfe1d7e3612960e6b69777fc12bbfc3162accb623db9fe3003bc852245d17df61db31f3acbacf8bc7b55f2eee0fa93e5afcff8a2e031b1"
        }
      ],
      "purl": "pkg:npm/sshpk@1.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/sshpk/-/sshpk-1.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/sshpk/-/sshpk-1.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b1fc5c4f9f43038dec89ee2ff2a07185b7f117e8bc8d6f148484f3d73833cbf8a07454f93ce9461f2f494c772f8a0a7bfe7e6bc8cf24b068ae423b0a956d64d"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asn1/-/asn1-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asn1/-/asn1-0.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/safer-buffer/-/safer-buffer-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9e1485ed3f8312a22e8d2ea3b5d967ea011596b822a2d919fff6124b126b41e724cdafd0ea1569094427f6a92856ccf7803119ce802aead2c83f28bbf9112f7"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2975c515d01b15763881e148c28c8d2be7f96756fbb307d70017cbec75c29a821630a5377664b6ebaef603811e42d0f32cacbb49799f06ee7526896f10ac2d18"
        },
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tweetnacl/-/tweetnacl-0.14.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1162f140c6a3a8fea1d6621298dacd9696a846a5df0fdb6ac163407404c15b592460e9c5b1f531e625bb0092f17ab9c262c9a280e5320bd56ab9967c6338e2"
        },
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/dashdash/-/dashdash-1.14.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a1f4efa1c111cd6c6e012d38c49779f0d38e029069b95fa2e86827fb2cfa7b514f10aede3b258362ea73d7f318d6f7b4ca18a9b5a2e72d834412a597bdaab9f"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51553d7626ead897055b140f03a282aa3e4ee3654e980637cd051f10ac54d0aa53197c0da028e45f57b5dde1cdbf0ff13f29edea9534ad9d61b63593353497b2"
        },
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsbn/-/jsbn-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1fce3f49c4e2df27e5c62e147ccdedee9cdd0a642819c224920f3d7af151118caf1697c91549d72eda4b29778b38c2d01ad72feaad5462000d1672556cbb49e"
        },
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/getpass/-/getpass-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
        },
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-typedarray/-/is-typedarray-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6258f3edf7f23dbacba4b9e0accb59ecd76e52056f8bac06f5127d21473209de7d610f75d4f049a6138351c6ce55ba987f17b5c2e61ffcb27c3dab8c470b0cfe"
        },
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/isstream/-/isstream-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        },
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec40079722c7239e9510874ae7bbb01dd1ca21a0066e75cf8b0d3259b6ab41938a68aa6f508816d2359154b89ab6733e5d7952c2c6a72011ff87318c26e94ca3"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.5-tuxcare.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1014835a0f1be0616d1eeaa62f3efde3c88145a64e87f54ba4d80a152b171ad49ba82964ef7b6910960c7e0dc3080c0661bfd8f149ec0a2fd54cd5c3936762f8"
        }
      ],
      "purl": "pkg:npm/qs@6.5.5-tuxcare.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/qs/-/qs-6.5.5-tuxcare.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.5-tuxcare.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/qs/-/qs-6.5.5-tuxcare.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.5.0-tuxcare.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5df190bed58a350f6ad16f2831d6e5079e20c35eb8ced8e4cf9939d026d4e4374cc538e9bde74bd6442d09d4b137f1f018bbcae8aa2a7c221ce85db779ae08d4"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tough-cookie/-/tough-cookie-2.5.0-tuxcare.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tough-cookie/-/tough-cookie-2.5.0-tuxcare.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25977780c5410154244ace8774d668f52768d0b35c41e30d3f70a8cc125bdc9602fd05186539cac4ff9ff285915f8ac73f912ead6c6a0074d2c140a394d29ad7"
        }
      ],
      "purl": "pkg:npm/psl@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/psl/-/psl-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/psl/-/psl-1.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        },
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.4.0-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b03584c6f56a073c74a02378b2941eec1110051a9d51daf23041da9219f2a14dd2e3f5e261de7e78314597f7e361217d590ba44092883869c8c10b49b874938"
        }
      ],
      "purl": "pkg:npm/uuid@3.4.0-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uuid/-/uuid-3.4.0-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.4.0-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uuid/-/uuid-3.4.0-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e12277766d160305b2fcd55e8a8661e409ed91d26858ac47c5c9b23fadb67ce9201dae33dd1d137412480883726920c4eae37055cf2066bf998a7c19007e3120"
        }
      ],
      "purl": "pkg:npm/semver@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "12.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e1cfc4cb6989f1abfd8e6ea1c3aa5f1d5fc0898bdee81f1ae351c62dcca6dbca43ed556f5607ea68c48f8d336508cec32034265321fd00430b232b9c8c02a67"
        }
      ],
      "purl": "pkg:npm/yargs@12.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-12.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@12.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-12.0.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/cli.js",
            "line": 5
          },
          {
            "location": "testapp/scripts/web-server.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e051be4521bd0cbeee130454657667dd24b7e038833dfccfd153a2130b545a513e011d84220fa14b2beb2205147e176047f52401e5b640781e3fe856ad7b3b8d"
        }
      ],
      "purl": "pkg:npm/cliui@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8479022eb1ac368a871389b635262c505ee368f"
        }
      ],
      "purl": "pkg:npm/strip-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed0317c322064f79466c02966bddb605ab37d998"
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296"
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4"
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549"
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58647ec4779c293afb11b5048722d28790ee6def49b5d886efcb9f69e2f14e0a6e75fff6d0aab2322a085192407b3953222e9ebf1ba852cf585dcd75714fb2cd"
        }
      ],
      "purl": "pkg:npm/p-limit@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dedeab553a1ea197d848677c6282c54760c992242b22252b19c8ef157da60f0ddb9fa9363adc073744cd08b6c13bec3ca93be29a10e4bfe2d2b1c6c9635bc4eb"
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67c977478c1858ce34ff9d99f92dbae6891f163f0ab76702d8c298fb1362de416cf97188ed65eefc8df4f5041061b456e228e267ecb1b3da6a121261d03a96dd"
        }
      ],
      "purl": "pkg:npm/os-locale@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69d6f1732595e3aaa21f2bd2a79d132add39b41e2d2b71dc985eff9f17c07619e8c7cdec7930dbc276aa28ee2c5d1cbbae81c0205a893ff470fc0b846d7eb52c"
        }
      ],
      "purl": "pkg:npm/execa@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "6.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79354bac14adedf8db0f2833f34e69327b2d22cd954c1364466d2ac5977e33b0395c377155158ee4cc460576618d8e1ca8b60b76dac6a917fc9813e6cf04a959"
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nice-try",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d67878e5d79e6f9a25358ede5fcd8190f3bb492c51e524982623d3ad3745515630025f0228c03937d3e34d89078918e2b15731710d475dd2e1c76ab1c49ccb35"
        }
      ],
      "purl": "pkg:npm/nice-try@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nice-try@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "411cadb574c5a140d3a4b1910d40d80cc9f40b40"
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44aac65b695b03398968c39f363fee5deafdf1ea"
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da42f49740c0b42db2ca9728571cb190c98efea3"
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c269a2975a993b98e5db82fca9d34cd06b68f2b9e18c297a73f8973c54f07f751ae756a45bf7f2ed022a37251355a2d841f6103cf92d170770a6c2233a86ca"
        }
      ],
      "purl": "pkg:npm/which@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18c6ade04279d7ad64232d877af2e5af896e363060be68f8d7729a400ee3b7857c078443b1fa4793b590f4656a7d8cb2c7c392fcbeba2a8c7eac944d9252caef"
        }
      ],
      "purl": "pkg:npm/get-stream@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f0672fa9dd216cd4fcad77f8d872de30a6fe3d1e2602a9df5195ce5955d93457ef18cefea34790659374d198f2f57edebd4f13f420c64627e58f154d81161c3"
        }
      ],
      "purl": "pkg:npm/pump@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae"
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-eof",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb43ff5598a6eb05d89b59fcd129c983313606bf"
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-eof@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af3c46fc3fc1069f05ca0a5c2c35482bc958e595c46ab4c61ae3d353b1b41a818b93d437179e5d7dd79a315a3a321ab5d1eb31ff63465cf7ac56b0f7280ca78"
        }
      ],
      "purl": "pkg:npm/lcid@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0f56fff2fd043f5228ab8ffbe1de83fed56c3e0167a19a2d60e5f15618f17a22908108356b8601d132facb7dd61cc038774096c65c35b8240bb3c4494b4aa28"
        }
      ],
      "purl": "pkg:npm/invert-kv@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a97d9b1b8f294ea6115660c1dfbae7ffa3d3ecb711f13ee8017ddb7fdf6ed53b759f3c587f1920a83c14c2894f957c1e3345f304e045cd2c7891fa7b28fd6cff"
        }
      ],
      "purl": "pkg:npm/mem@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem/-/mem-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem/-/mem-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-age-cleaner",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c9cf1ea73283fa3c32cf0459a0efec5129e159bc56e832b1a5c66363f4296f5f9dcaae6bcce5b5c55c45a36f3e1ccf50059fe8d627dcff0c94b3ee1aecd30df"
        }
      ],
      "purl": "pkg:npm/map-age-cleaner@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-age-cleaner@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-defer",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f6eb182f6c9aa8cd743004a7d4f96b196b0fb0c"
        }
      ],
      "purl": "pkg:npm/p-defer@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-defer/-/p-defer-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-defer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-defer/-/p-defer-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"
        }
      ],
      "purl": "pkg:npm/mimic-fn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-is-promise",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6375b4c2544f2bc64c45b36af7b978339a2d8a8780e659b5cfb6e4364c4291af0748f8d1d314569a90a673dbad89a2cff496f5783f0181e2314d6e00205e393e"
        }
      ],
      "purl": "pkg:npm/p-is-promise@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-is-promise/-/p-is-promise-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-is-promise@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-is-promise/-/p-is-promise-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afd4bf6725eefd7bbdab5b58969b0b22c6b711e2d75e4d15c25c6a4dc1517e0f4484c5bed7b91bb7d1b436b8029a119be6f4f687284964b7c31b1fbbfb9523ff"
        }
      ],
      "purl": "pkg:npm/y18n@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "11.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ba901fd624389ac4e34b2509c5f1c731f5211ea134cb7a4f1155b68e22cac0512f15ac11177e67929c2671ca073e5c2dac34c048c0e3a77dcc62ca78c7b1549"
        }
      ],
      "purl": "pkg:npm/yargs-parser@11.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-11.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@11.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-11.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "chalk",
      "version": "0.4.31",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a31d74241a6b1edbb973cf36d97a2896834a51f9"
        }
      ],
      "purl": "pkg:npm/%40types/chalk@0.4.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/chalk/-/chalk-0.4.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/chalk@0.4.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/chalk/-/chalk-0.4.31.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "glob",
      "version": "5.0.35",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1cf95bdeb3330bc8c585bd72e49688b14f89f485aad42156639e9cf3b5a6749ca2eeba5ed9df688cb767d414601a678cb55d68c544cb422397b0bf28786887a"
        }
      ],
      "purl": "pkg:npm/%40types/glob@5.0.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/glob/-/glob-5.0.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/glob@5.0.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/glob/-/glob-5.0.35.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "events",
      "version": "1.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76d1f7c9b360ea34a4066e88b6ab8be710ca22a4dd45d1b93e3987546385f782cea923695b1f64935ac5d82d93bff7b733a6d68ccb4ea12a30fdd56c8e3c8f"
        }
      ],
      "purl": "pkg:npm/%40types/events@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/events/-/events-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/events@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/events/-/events-1.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/events"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "2.0.29",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5002e14f75e2d71e564281df0431c8c1b4a2a36a"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@2.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-2.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@2.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-2.0.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "6.0.96",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ec38e63ab4c4378c2076c03e755c50e69a9826e3054a90910275c551a9aa5b2446bb6b024372bf92687f2da33fb8af8296f1843733bc9b5cca120e8d5019ec0"
        }
      ],
      "purl": "pkg:npm/%40types/node@6.0.96",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-6.0.96.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@6.0.96",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-6.0.96.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "jasmine",
      "version": "2.8.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a4ac71594e039791985abb7e8aeb6f222859236e9d75b7f6c70a463831e7eee11e8c70c836143f4fde7681bffd188329f8b33f1b682a25269da076649e9208b"
        }
      ],
      "purl": "pkg:npm/%40types/jasmine@2.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/jasmine/-/jasmine-2.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/jasmine@2.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/jasmine/-/jasmine-2.8.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "jasminewd2",
      "version": "2.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8580d5990653e5503692281de07e1bbfbbe5fce865ca6a7044451e9aa05d3aab6b613a3962d9b5d9ae56e7f9c680661d6a7195c63d31fd5859ec9de13a0fd82a"
        }
      ],
      "purl": "pkg:npm/%40types/jasminewd2@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/jasminewd2/-/jasminewd2-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/jasminewd2@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/jasminewd2/-/jasminewd2-2.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/jasminewd2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.15.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d7578cf4f1d11d5f6ea804cef35dc7a7ff6dae67"
        }
      ],
      "purl": "pkg:npm/body-parser@1.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.15.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 4
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d97196f9d5baf7f6935e25985549edd2a6c2339"
        }
      ],
      "purl": "pkg:npm/bytes@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f87057e995b1a1f6ae6a4960664137bc56f039da"
        }
      ],
      "purl": "pkg:npm/debug@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9cd13c03adbff25b65effde7ce864ee952017098"
        }
      ],
      "purl": "pkg:npm/ms@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5783b4e1c459f06fa5ca27f991f3d06e7a310359"
        }
      ],
      "purl": "pkg:npm/depd@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "788c0d2c1de2c81b9e6e8c01843b6b97eb920750"
        }
      ],
      "purl": "pkg:npm/http-errors@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81a552141ec104b88e89ce383103ad5c66564d08"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce1482b6df2fd8d0eb4653d0a4236dc3f85e64bb5f503ab104cd6e76a8a46ff1db939d8b2b89d04b0af5d2eefb8a8a425b92ecc87a6e5d2d069c4738f262de7b"
        }
      ],
      "purl": "pkg:npm/statuses@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f88aba4ab0b1508e8312acc39345f36e992e2f2"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f1336481b083cd75337992a16971aa2d906947"
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b7848c03c2dece69a9522b0fae8c4126d745f3b"
        }
      ],
      "purl": "pkg:npm/qs@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "adfeace2e4fb3098058014d08c072dcc59758774"
        }
      ],
      "purl": "pkg:npm/raw-body@2.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cab10fb4909e441c82842eafe1ad646c81804410"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8710d7af0aa626f8fffa1ce00168545263255748"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d02637b067fe958bdbfdd3a40ec56fef7373247"
        }
      ],
      "purl": "pkg:npm/chai@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai/-/chai-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai/-/chai-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "13ca515d86206da0bac66e834dd397d87581094c"
        }
      ],
      "purl": "pkg:npm/assertion-error@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-eql",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef558acab8de25206cd713906d74e56930eb69f2"
        }
      ],
      "purl": "pkg:npm/deep-eql@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-eql/-/deep-eql-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-eql/-/deep-eql-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ba5ec2a885640e470ea4e8505971900dac58822"
        }
      ],
      "purl": "pkg:npm/type-detect@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "762217cc06db258ec48908a1298e8b95121e8ea2"
        }
      ],
      "purl": "pkg:npm/type-detect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai-as-promised",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09d7a402908aa70dfdbead53e5853fc79d3ef21c"
        }
      ],
      "purl": "pkg:npm/chai-as-promised@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai-as-promised/-/chai-as-promised-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai-as-promised@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai-as-promised/-/chai-as-promised-5.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clang-format",
      "version": "1.0.49",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf52f42277d41ed3618591f87145acf64aceb7e6"
        }
      ],
      "purl": "pkg:npm/clang-format@1.0.49",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clang-format/-/clang-format-1.0.49.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clang-format@1.0.49",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clang-format/-/clang-format-1.0.49.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "clang-format"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 4
          },
          {
            "location": "gulpfile.js",
            "line": 81
          },
          {
            "location": "gulpfile.js",
            "line": 88
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.5.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
        }
      ],
      "purl": "pkg:npm/async@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "860a121ab737a63cc03c734183e2a715c2b61f09474ecfd8ac0194afaaa04d5519997bf55045d79746d934128c03d7ee77a95160574f1b3d315f1c9c3f39a68b"
        }
      ],
      "purl": "pkg:npm/resolve@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expect.js",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0a59a0d2eff5437544ebf0ceaa6015841d09b5b"
        }
      ],
      "purl": "pkg:npm/expect.js@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expect.js/-/expect.js-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expect.js@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expect.js/-/expect.js-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "express",
      "version": "4.14.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "646c237f766f148c2120aff073817b9e4d7e0d33"
        }
      ],
      "purl": "pkg:npm/express@4.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.14.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.14.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86246758c7dd6d21a6474ff084a4740ec05eb21f"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b327184e8992101177b28563fb5e7102acd0ca9"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
        }
      ],
      "purl": "pkg:npm/cookie@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e3d58655346909fe6f0f45a5de68103b294d20"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "03d30b5f67dd6e632d2945d30d6652731a34d5d8"
        }
      ],
      "purl": "pkg:npm/etag@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c400d8d4530935bc232549c5fa385ec07de6fcd"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "faf51b9eb74aaef3b3acf4ad5f61abf24cb7b93e"
        }
      ],
      "purl": "pkg:npm/statuses@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "651f838e22424e7566de161d8358caa199f83d4f"
        }
      ],
      "purl": "pkg:npm/fresh@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5529a4d67654134edcc5266656835b0f851afcee"
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc289d4ed8993119460c156253262cdc8de65bf3"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df604178005f522f15eb4490e7247a1bfaa67f8c"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "71c0ee3b102de3f202f3b64f608d173fcba1a918"
        }
      ],
      "purl": "pkg:npm/proxy-addr@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98c23dab1175657b8c0573e8ceccd91b0ff18c84"
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "296aca878a821816e5b85d0a285a99bcff4582f0"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f49be6b487894ddc40dcc94a322f611092e00d5e"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.14.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "39b0438b3f510be5dc6f667a11f71689368cdeef"
        }
      ],
      "purl": "pkg:npm/send@0.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.14.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "978857442c44749e4206613e37946205826abd80"
        }
      ],
      "purl": "pkg:npm/destroy@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "115f9e3b6b3daf2959983cb38f149a2d40eb5d53"
        }
      ],
      "purl": "pkg:npm/mime@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae25cf2512b3885a1d95d7f037868d8431124765"
        }
      ],
      "purl": "pkg:npm/ms@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2cf9889bd4435a320cc36895c9aa57bd662e6ac7"
        }
      ],
      "purl": "pkg:npm/serve-static@1.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.11.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0294fb922bb9375153541c4f7096231f287c8af8"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2299f02c6ded30d4a5961b0b9f74524a18f634fc"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp",
      "version": "3.9.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "571ce45928dd40af6514fc4011866016c13845b4"
        }
      ],
      "purl": "pkg:npm/gulp@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp/-/gulp-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp/-/gulp-3.9.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 3
          },
          {
            "location": "website/gulpfile.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9c8c13757cc1dd7bc379ac77b2c62a5c2868c40"
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deprecated",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9c9af5464afa1e7a971458a8bdef2aa94d5bb19"
        }
      ],
      "purl": "pkg:npm/deprecated@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deprecated@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-util",
      "version": "3.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0054e1e744502e27c04c187c3ecc505dd54bbb4f"
        }
      ],
      "purl": "pkg:npm/gulp-util@3.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-util@3.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eff52e3758249d33be402b8bb8e564bb2b5d4031"
        }
      ],
      "purl": "pkg:npm/array-differ@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "beeper",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e6d5ea8c5dad001304a70b22638447f69cb2f809"
        }
      ],
      "purl": "pkg:npm/beeper@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/beeper/-/beeper-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/beeper@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/beeper/-/beeper-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4065e2013cf9fb916ddfd82efb506ad4c6769062"
        }
      ],
      "purl": "pkg:npm/dateformat@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fancy-log",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c4a3462ba14adf5dfbab79731fd3844a2069cbbb"
        }
      ],
      "purl": "pkg:npm/fancy-log@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fancy-log@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-gray",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2962cf54ec9792c48510a3deb524436861ef7251"
        }
      ],
      "purl": "pkg:npm/ansi-gray@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-gray/-/ansi-gray-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-gray@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-gray/-/ansi-gray-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-wrap",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a82250ddb0015e9a27ca82e82ea603bbfa45efaf"
        }
      ],
      "purl": "pkg:npm/ansi-wrap@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-wrap/-/ansi-wrap-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-wrap@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-wrap/-/ansi-wrap-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "time-stamp",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "764a5a11af50561921b133f3b44e618687e0f5c3"
        }
      ],
      "purl": "pkg:npm/time-stamp@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/time-stamp/-/time-stamp-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/time-stamp@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/time-stamp/-/time-stamp-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulplog",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e28c4d45d05ecbbed818363ce8f9c5926229ffe5"
        }
      ],
      "purl": "pkg:npm/gulplog@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulplog/-/gulplog-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulplog@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulplog/-/gulplog-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glogg",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7fe0f199f57ac906cf512feead8f90ee4a284fc5"
        }
      ],
      "purl": "pkg:npm/glogg@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glogg/-/glogg-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glogg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glogg/-/glogg-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sparkles",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1acbbfb592436d10bbe8f785b7cc6f82815012c3"
        }
      ],
      "purl": "pkg:npm/sparkles@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sparkles/-/sparkles-1.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sparkles@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sparkles/-/sparkles-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "has-gulplog",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6414c82913697da51590397dafb12f22967811ce"
        }
      ],
      "purl": "pkg:npm/has-gulplog@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-gulplog/-/has-gulplog-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-gulplog@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-gulplog/-/has-gulplog-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reescape",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b1d6f5dfe07c8a355753e5f27fac7f1cde1616a"
        }
      ],
      "purl": "pkg:npm/lodash._reescape@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reescape@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reevaluate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58bc74c40664953ae0b124d806996daca431e2ed"
        }
      ],
      "purl": "pkg:npm/lodash._reevaluate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ccf2d89166af03b3663c796538b75ac6e114d9d"
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8cdecc6169a255be9098ae8b0c53d378931d14f"
        }
      ],
      "purl": "pkg:npm/lodash.template@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecopy",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36"
        }
      ],
      "purl": "pkg:npm/lodash._basecopy@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecopy@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basetostring",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1861d877f824a52f669832dcaf3ee15566a07d5"
        }
      ],
      "purl": "pkg:npm/lodash._basetostring@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basetostring@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basevalues",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b775762802bde3d3297503e26300820fdf661b7"
        }
      ],
      "purl": "pkg:npm/lodash._basevalues@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basevalues@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isiterateecall",
      "version": "3.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5203ad7ba425fae842460e696db9cf3e6aac057c"
        }
      ],
      "purl": "pkg:npm/lodash._isiterateecall@3.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.escape",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "995ee0dc18c1b48cc92effae71a10aab5b487698"
        }
      ],
      "purl": "pkg:npm/lodash.escape@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.escape@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._root",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fba1c4524c19ee9a5f8136b4609f017cf4ded692"
        }
      ],
      "purl": "pkg:npm/lodash._root@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._root/-/lodash._root-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._root@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._root/-/lodash._root-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a"
        }
      ],
      "purl": "pkg:npm/lodash.keys@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._getnative",
      "version": "3.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5"
        }
      ],
      "purl": "pkg:npm/lodash._getnative@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._getnative@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash.isarguments",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f573d85c6a24289ff00663b491c1d338ff3458a"
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarguments@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarray",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55"
        }
      ],
      "purl": "pkg:npm/lodash.isarray@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarray@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.restparam",
      "version": "3.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "936a4e309ef330a7645ed4145986c85ae5b20805"
        }
      ],
      "purl": "pkg:npm/lodash.restparam@3.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.restparam@3.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb307844753b66b9f1afa54e262c745307dba8e5"
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multipipe",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a8f2ddf70eed564dff2d57f1e1a137d9f05078b"
        }
      ],
      "purl": "pkg:npm/multipipe@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multipipe@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c614dcf67e2fb14995a91711e5a617e8a60a31db"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cf4c54ef648e3813084c636dd2079e166c081d9"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bedd5ca0897949bca47e7ff408062d549f587f2"
        }
      ],
      "purl": "pkg:npm/object-assign@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29bbd92078a739f0bcce2b4ee41e837953522924"
        }
      ],
      "purl": "pkg:npm/replace-ext@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0004569b37c7c74ba39c43f3ced78d1ad94140be"
        }
      ],
      "purl": "pkg:npm/through2@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9beab3cdc9fb294c4499dd6031b72117e63678851b89e51ac645ada6dc87cb0ad7d2b13c40462a3c2d3b56ecb85a6df6ff1135e8d71d05cb5bf12d177bfe4879"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e001fa6797f334d05c1fee970cc7c0fc14edf3bb24c6a2653b49408770e47abe734e1700c46ea62b3fa21aedf4f142a83cf43c0dcab1ff8261ba3ce5b516be85"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0455b38fc5e0cf30d4325132e461970c2091cde"
        }
      ],
      "purl": "pkg:npm/vinyl@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "298d7e2231660f40c003c2ed3140decf3f53085f"
        }
      ],
      "purl": "pkg:npm/clone@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b88f94a82cf38b8791d58046ea4029ad88ca99d1"
        }
      ],
      "purl": "pkg:npm/clone-stats@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
        }
      ],
      "purl": "pkg:npm/interpret@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "liftoff",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a98f2ff67183d8ba7cfaca10548bd7ff0550b385"
        }
      ],
      "purl": "pkg:npm/liftoff@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/liftoff/-/liftoff-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/liftoff@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/liftoff/-/liftoff-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a755ea7bc1adfcc5a31ce7e762dbaadc5e636444"
        }
      ],
      "purl": "pkg:npm/extend@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40043929e7bc60adf0b7f4827c4c6e75a0deca12"
        }
      ],
      "purl": "pkg:npm/findup-sync@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-file",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4935dedfd9488648e006b0129566e9386711ea63"
        }
      ],
      "purl": "pkg:npm/detect-file@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-file/-/detect-file-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-file@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-file/-/detect-file-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-exists-sync",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "982d6893af918e72d08dec9e8673ff2b5a8d6add"
        }
      ],
      "purl": "pkg:npm/fs-exists-sync@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-exists-sync@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-exists-sync/-/fs-exists-sync-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863"
        }
      ],
      "purl": "pkg:npm/is-glob@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac468177c4943405a092fc8f29760c6ffc6206c0"
        }
      ],
      "purl": "pkg:npm/is-extglob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "2.3.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86677c97d1720b363431d04d0d15293bd38c1565"
        }
      ],
      "purl": "pkg:npm/micromatch@2.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@2.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf"
        }
      ],
      "purl": "pkg:npm/arr-diff@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53"
        }
      ],
      "purl": "pkg:npm/array-unique@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "1.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba77962e12dff969d6b76711e914b737857bf6a7"
        }
      ],
      "purl": "pkg:npm/braces@1.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@1.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-range",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a299effd335fe2721ebae8e257ec79644fc85337"
        }
      ],
      "purl": "pkg:npm/expand-range@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-range@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50b77dfd7e469bc7492470963699fe7a8485a723"
        }
      ],
      "purl": "pkg:npm/fill-range@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01fcbbb393463a548f2f466cce16dece49db908f"
        }
      ],
      "purl": "pkg:npm/is-number@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randomatic",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f92548cfc896da24392e01ace956749f5642e5a5e3b7c0394f44e4cc2c6286d73305345460adc88aa3596dcff03335392a1341f30f1eb9e5038be75374ea1a3"
        }
      ],
      "purl": "pkg:npm/randomatic@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomatic@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a"
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "preserve",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b"
        }
      ],
      "purl": "pkg:npm/preserve@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/preserve@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df07284e342a807cd733ac5af72411e581d1177b"
        }
      ],
      "purl": "pkg:npm/expand-brackets@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-posix-bracket",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4"
        }
      ],
      "purl": "pkg:npm/is-posix-bracket@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-posix-bracket@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1"
        }
      ],
      "purl": "pkg:npm/extglob@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-regex",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c1c4b9bee3e09725ddb106b75c1e301fe2f18b26"
        }
      ],
      "purl": "pkg:npm/filename-regex@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-regex@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef"
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.omit",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a9c744829f39dbb858c76ca3579ae2a54ebd1fa"
        }
      ],
      "purl": "pkg:npm/object.omit@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.omit@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5265c681a4f294dabbf17c9509b6763aa84510ce"
        }
      ],
      "purl": "pkg:npm/for-own@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-glob",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c"
        }
      ],
      "purl": "pkg:npm/parse-glob@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-glob@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-base",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4"
        }
      ],
      "purl": "pkg:npm/glob-base@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-base@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81383d72db054fcccf5336daa902f182f6edbb28"
        }
      ],
      "purl": "pkg:npm/glob-parent@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-dotfile",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6a2f32ffd2dfb04f5ca25ecd0f6b83cf798a1e1"
        }
      ],
      "purl": "pkg:npm/is-dotfile@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-dotfile@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-cache",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d5219c2d0a3902f5882f5a4a4ce79079ac184161166101a25b81c1585d7b079db67d51923d9e7556619a41942aaff61a36799af23e75ab646b0e74fc1559759"
        }
      ],
      "purl": "pkg:npm/regex-cache@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-cache@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-equal-shallow",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534"
        }
      ],
      "purl": "pkg:npm/is-equal-shallow@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-equal-shallow@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-primitive",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "207bab91638499c07b2adf240a41a87210034575"
        }
      ],
      "purl": "pkg:npm/is-primitive@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-primitive@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-dir",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b219259a5602fac5c5c496ad894a6e8cc430261e"
        }
      ],
      "purl": "pkg:npm/resolve-dir@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-dir@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-tilde",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b81eba897e5a3d31d1c3d102f8f01441e559449"
        }
      ],
      "purl": "pkg:npm/expand-tilde@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-tilde@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-homedir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffbc4988336e0e833de0c168c7ef152121aa7fb3"
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-modules",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ea5a3bed42c6d6ce995a4f8a1269b5dae223828d"
        }
      ],
      "purl": "pkg:npm/global-modules@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-modules@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-modules/-/global-modules-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-prefix",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d3bc6b8da3ca8112a160d8d496ff0462bfef78f"
        }
      ],
      "purl": "pkg:npm/global-prefix@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-prefix@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "homedir-polyfill",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c2bbc8a758998feebf5ed68580f76d46768b4bc"
        }
      ],
      "purl": "pkg:npm/homedir-polyfill@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/homedir-polyfill@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-passwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d5b934a456993b23d37f40a382d6f1666a8e5c6"
        }
      ],
      "purl": "pkg:npm/parse-passwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-passwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de1aa6d63ea29dd248737b69f1ff8b8002d2108c"
        }
      ],
      "purl": "pkg:npm/is-windows@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fined",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b37dc844b76a2f5e7081e884f7c0ae344f153476"
        }
      ],
      "purl": "pkg:npm/fined@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fined/-/fined-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fined@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fined/-/fined-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-tilde",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97e801aa052df02454de46b02bf621642cdc8502"
        }
      ],
      "purl": "pkg:npm/expand-tilde@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-tilde@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.defaults",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a7f868334b407dea06da16d88d5cd29e435fecf"
        }
      ],
      "purl": "pkg:npm/object.defaults@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.defaults/-/object.defaults-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.defaults@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.defaults/-/object.defaults-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a794af0c05ab1752846ee753a1f211a05ba0c44f"
        }
      ],
      "purl": "pkg:npm/array-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-each/-/array-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-each/-/array-each-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-slice",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "075a8c0f74413fb3bca341f629bad70f207421c71e8cc175e7ef3b2ef968af5d8e34f4473fa8138d730d92dfdddd9b8e19b01eeba84599a09f102236e147e9eb"
        }
      ],
      "purl": "pkg:npm/array-slice@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-slice/-/array-slice-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-slice@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-slice/-/array-slice-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c63332f415cedc4b04dbfe70cf836494c53cb44b"
        }
      ],
      "purl": "pkg:npm/for-own@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.pick",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
        }
      ],
      "purl": "pkg:npm/object.pick@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.pick@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-filepath",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "159d6155d43904d16c10ef698911da1e91969b73"
        }
      ],
      "purl": "pkg:npm/parse-filepath@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-filepath@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20de69f3db942ef2d87b9c2da36f172235b1b5eb"
        }
      ],
      "purl": "pkg:npm/is-absolute@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d27f4c7d516d175fb610db84bbeef23c3bc97aa5"
        }
      ],
      "purl": "pkg:npm/is-relative@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unc-path",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ab053a72573c10250ff416a3814c35178af39b9"
        }
      ],
      "purl": "pkg:npm/is-unc-path@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unc-path@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unc-path-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
        }
      ],
      "purl": "pkg:npm/unc-path-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unc-path-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-cache",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-cache@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-root",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
        }
      ],
      "purl": "pkg:npm/path-root@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-root/-/path-root-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-root@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-root/-/path-root-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-root-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
        }
      ],
      "purl": "pkg:npm/path-root-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-root-regex/-/path-root-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-root-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-root-regex/-/path-root-regex-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flagged-respawn",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff191eddcd7088a675b2610fffc976be9b8074b5"
        }
      ],
      "purl": "pkg:npm/flagged-respawn@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flagged-respawn@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c526a52d89b45c45cc690b88163be0497f550cb"
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isstring",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
        }
      ],
      "purl": "pkg:npm/lodash.isstring@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isstring@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.mapvalues",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bafa5005de9dd6f4f26668c30ca37230cc9689c"
        }
      ],
      "purl": "pkg:npm/lodash.mapvalues@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.mapvalues/-/lodash.mapvalues-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.mapvalues@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.mapvalues/-/lodash.mapvalues-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rechoir",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85204b54dba82d5742e28c96756ef43af50e3384"
        }
      ],
      "purl": "pkg:npm/rechoir@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rechoir@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "orchestrator",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14e7e9e2764f7315fbac184e506c7aa6df94ad7e"
        }
      ],
      "purl": "pkg:npm/orchestrator@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/orchestrator@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e177206c3c80837d85632e8b9359dfe8b2f6eaf"
        }
      ],
      "purl": "pkg:npm/end-of-stream@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2e261557ce4c314ec8304f3fa82663e4297ca20"
        }
      ],
      "purl": "pkg:npm/once@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sequencify",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "90cff19d02e07027fd767f5ead3e7b95d1e7380c"
        }
      ],
      "purl": "pkg:npm/sequencify@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sequencify@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-consume",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a41ead1a6d6081ceb79f65b061901b6d8f3d1d0f"
        }
      ],
      "purl": "pkg:npm/stream-consume@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-consume@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-hrtime",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b7e3ea42435a4c9b2759d99e0f201eb195802ee1"
        }
      ],
      "purl": "pkg:npm/pretty-hrtime@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-hrtime@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "300bc6e0e86374f7ba61068b5b1ecd57fc6532da"
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tildify",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcec03f55dca9b7aa3e5b04f21817eb56e63588a"
        }
      ],
      "purl": "pkg:npm/tildify@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tildify/-/tildify-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tildify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tildify/-/tildify-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8flags",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aab1a1fa30d45f88dd321148875ac02c0b55e5b4"
        }
      ],
      "purl": "pkg:npm/v8flags@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8flags@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b5be23a32b63a7c9deb8d0f28d485724a3df190"
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-fs",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a6851ce1cac1c1cea5fe86c0931d620c2cfa9e6"
        }
      ],
      "purl": "pkg:npm/vinyl-fs@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-fs@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c656051e9817d9ff08ed881477f3fe4019f3ef7d"
        }
      ],
      "purl": "pkg:npm/defaults@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-stream",
      "version": "3.1.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9170a5f12b790306fdfe598f313f8f7954fd143b"
        }
      ],
      "purl": "pkg:npm/glob-stream@3.1.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-stream@3.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6cb73d3226c1efef04de3c56d012f03377ee15f"
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "gulpfile.js",
            "line": 12
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d087c39c6b38c001b97fca7ce6d0e1e80afbac7"
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob2base",
      "version": "0.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d419b3e28f12e83a362164a277055922c9c0d56"
        }
      ],
      "purl": "pkg:npm/glob2base@0.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob2base@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-index",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "675d358b2ca3892d795a1ab47232f8b6e2e0dde4"
        }
      ],
      "purl": "pkg:npm/find-index@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-index@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ordered-read-streams",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd565a9af8eb4473ba69b6ed8a34352cb552f126"
        }
      ],
      "purl": "pkg:npm/ordered-read-streams@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ordered-read-streams@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ab9c67b29d57209071410e1d7a7a968cd3ad48"
        }
      ],
      "purl": "pkg:npm/through2@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d59a4a75427447d9aa6c91e70263f8d26a4b104b"
        }
      ],
      "purl": "pkg:npm/unique-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-watcher",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b95b4a8df74b39c83298b0c05c978b4d9a3b710b"
        }
      ],
      "purl": "pkg:npm/glob-watcher@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-watcher@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gaze",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40b709537d24d1d45767db5a908689dfe69ac44f"
        }
      ],
      "purl": "pkg:npm/gaze@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gaze@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globule",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9c8edde1da79d125a151b79533b978676346ae5"
        }
      ],
      "purl": "pkg:npm/globule@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globule@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.1.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d29e0a055dea5138f4d07ed40e8982e83c2066cd"
        }
      ],
      "purl": "pkg:npm/glob@3.1.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.1.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "gulpfile.js",
            "line": 12
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15a4806a57547cb2d2dbf27f42e89a8c3451b364"
        }
      ],
      "purl": "pkg:npm/graceful-fs@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca4309dadee6b54cc0b8d247e8d7c7a0975bdc9b"
        }
      ],
      "purl": "pkg:npm/inherits@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c74e780574f63c6f9a090e90efbe6ef53a6a756a"
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d4524e8b955f95d4f5b58851ce21dd72fb4e952"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ff21f198cad2175f9f3b781853fd94d0d19b590"
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d154840d579cfcc7b67804eea2241df088f204c317d1f6a1a1bf1827de95d60a36463bc29359b51b19ad7d79fc44d49a2da4eda29edfb2e861bbda0b93785480"
        },
        {
          "alg": "SHA-1",
          "content": "8f57560c83b59fc270bd3d561b690043430e2551"
        }
      ],
      "purl": "pkg:npm/lodash@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "3.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7613c778a1afea62f25c630a086d7f3acbbdd818"
        }
      ],
      "purl": "pkg:npm/graceful-fs@3.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@3.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natives",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ebe4c315ec03e32c58d78a6d8ca692eb719576d2a2112d694cfcb19fd25bd2b06a3cc67b55c0a2a281213cdb2bfa6a87b4c1b16bfe5cfc785c0b8b8f114c3f9c"
        }
      ],
      "purl": "pkg:npm/natives@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natives/-/natives-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natives@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natives/-/natives-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85b8862f3844b5a6d5ec8467a93598173a36f794"
        }
      ],
      "purl": "pkg:npm/strip-bom@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59bfb50cd905f60d7c394cd3d9acaab4e6ad934e"
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f356c87a550a255461f36bbeb2a5ba8bf784847"
        }
      ],
      "purl": "pkg:npm/vinyl@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6126a90ad4f72dbf5acdb243cc37724fe93fc1f"
        }
      ],
      "purl": "pkg:npm/clone@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-clang-format",
      "version": "1.0.23",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe258586b83998491e632fc0c4fc0ecdfa10c89f"
        }
      ],
      "purl": "pkg:npm/gulp-clang-format@1.0.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-clang-format/-/gulp-clang-format-1.0.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-clang-format@1.0.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-clang-format/-/gulp-clang-format-1.0.23.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-clang-format"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 5
          },
          {
            "location": "gulpfile.js",
            "line": 80
          },
          {
            "location": "gulpfile.js",
            "line": 87
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-diff",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "101b23712dd6b107bd07d05ab88ea3ac485fed77"
        }
      ],
      "purl": "pkg:npm/gulp-diff@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-diff/-/gulp-diff-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-diff@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-diff/-/gulp-diff-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-color",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a5ae74fd76b6267af666e69e2afbbd01def34d1"
        }
      ],
      "purl": "pkg:npm/cli-color@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-color/-/cli-color-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-color@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-color/-/cli-color-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "754bb5bfe55451da69a58b94d45f4c5b0462d58f"
        }
      ],
      "purl": "pkg:npm/d@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.38",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c233278fa3b0176d4112c1b97c422d355521f6a6263db3f6b7ad253fe70fcc953231f073cbd719f622718df1e8edff1ba57098274ceeefa8db4e031cd87762a"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.38",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.38.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.38.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-iterator",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7de889141a05a94b0854403b2d0a0fbfa98f3b7"
        }
      ],
      "purl": "pkg:npm/es6-iterator@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-iterator@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf00ef4fdab6ba1b46ecb7b629b4c7ed5715cc77"
        }
      ],
      "purl": "pkg:npm/es6-symbol@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memoizee",
      "version": "0.4.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bde9817663c9e40fdb2a4ea1c367296087ae8c8f"
        }
      ],
      "purl": "pkg:npm/memoizee@0.4.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memoizee@0.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-weak-map",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e3ab32251ffd1538a1f8e5ffa1357772f92d96f"
        }
      ],
      "purl": "pkg:npm/es6-weak-map@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-weak-map@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df8c69eef1647923c7157b9ce83840610b02cc39"
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
        }
      ],
      "purl": "pkg:npm/is-promise@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2738bd9f0d3cf4f84490c5736c48699ac632cda3"
        }
      ],
      "purl": "pkg:npm/lru-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next-tick",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca86d1fe8828169b0120208e3dc8424b9db8342c"
        }
      ],
      "purl": "pkg:npm/next-tick@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next-tick@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "timers-ext",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61cc47a76c1abd3195f14527f978d58ae94c5204"
        }
      ],
      "purl": "pkg:npm/timers-ext@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-ext@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60eafd0d28ee906e4e8ff0a52c1229521033bf99"
        }
      ],
      "purl": "pkg:npm/diff@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
        }
      ],
      "purl": "pkg:npm/event-stream@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "from",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83c60afc58b9c56997007ed1a768b3ab303a44fe"
        }
      ],
      "purl": "pkg:npm/from@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/from/-/from-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/from@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/from/-/from-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e56aa94c4c8055a16404a0674b78f215f7c8e194"
        }
      ],
      "purl": "pkg:npm/map-stream@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause-stream",
      "version": "0.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe5a34b0cbce12b5aa6a2b403ee2e73b602f1445"
        }
      ],
      "purl": "pkg:npm/pause-stream@0.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pause-stream@0.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd0eea5e63a211dfff7eb0f091c4133e2d0dd28f"
        }
      ],
      "purl": "pkg:npm/split@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split/-/split-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split/-/split-0.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d5e433c185261dde623ca3f44c586bcf5c4ad14"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkginfo",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b29f6a81f70717142e09e765bbeab97b4f81e21"
        }
      ],
      "purl": "pkg:npm/pkginfo@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkginfo/-/pkginfo-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkginfo@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkginfo/-/pkginfo-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner2",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb4d8a1420ea362764e21ad4780397bebcb41cbe"
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner2@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b12dab878c0d69e3e7891051662a32fc6bddcc1"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f90341e68a53ccc928788dacfcd11b36eb9b78e"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-equal",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc522fab38516012e4d4ee47513b147b72359019"
        }
      ],
      "purl": "pkg:npm/stream-equal@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-equal/-/stream-equal-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-equal@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-equal/-/stream-equal-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-tslint",
      "version": "7.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bd3ff4fbc16d4cbd9abb08ff786db89b563e93d"
        }
      ],
      "purl": "pkg:npm/gulp-tslint@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-tslint/-/gulp-tslint-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-tslint@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-tslint/-/gulp-tslint-7.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-tslint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint",
      "version": "2.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e7252915ce681b40827ee14248c46d34e9aa62c"
        }
      ],
      "purl": "pkg:npm/jshint@2.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jshint/-/jshint-2.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint@2.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jshint/-/jshint-2.9.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "22817534f24bfa4950c34d532d48ecbc621b8c14"
        }
      ],
      "purl": "pkg:npm/cli@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli/-/cli-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli/-/cli-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-browserify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0241c45730a9fc6323b206dbf38edc741d0bb10"
        }
      ],
      "purl": "pkg:npm/console-browserify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "date-now",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaf439fd4d4848ad74e5cc7dbef200672b9e345b"
        }
      ],
      "purl": "pkg:npm/date-now@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/date-now@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "996c28b191516a8be86501a7d79757e5c70c1068"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2de59a0822d5027fabff6f032c2b25a2a8abe738"
        }
      ],
      "purl": "pkg:npm/domhandler@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf"
        }
      ],
      "purl": "pkg:npm/domutils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "073c697546ce0780ce23be4a28e293e40bc30c82"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd28773e2642881aec51544924299c5cd822185b"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0"
        }
      ],
      "purl": "pkg:npm/entities@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2987aa3821347fcde642b24fdfc9e4fb712bf26"
        }
      ],
      "purl": "pkg:npm/entities@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.7.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3678bd8ab995057c07ade836ed2ef087da811d45"
        }
      ],
      "purl": "pkg:npm/lodash@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.7.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3596e6307a781544f591f37da618360f31db57b1"
        }
      ],
      "purl": "pkg:npm/shelljs@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e15fbcac97d3ee99bf2d73b4c656b082bbafb91"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "0.3.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93835a5bebd2ef2b509fa320267ddf62942ddb4fe63a060ce45b7d05831f4090f3d904fac84792f5727c936370f094de58aff39cf3d6da7dd4246cf260488ca0"
        }
      ],
      "purl": "pkg:npm/marked@0.3.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-0.3.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@0.3.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-0.3.12.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "marked"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "2.5.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "161be5bdeb496771eb9b35745050b622b5aefc58"
        }
      ],
      "purl": "pkg:npm/mocha@2.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-2.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-2.5.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mocha"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/mocha.js",
            "line": 11
          },
          {
            "location": "lib/frameworks/mocha.js",
            "line": 11
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd430e889832ec353b9acd1de217c11cb3eef873"
        }
      ],
      "purl": "pkg:npm/commander@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf"
        }
      ],
      "purl": "pkg:npm/diff@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dbc2fe674e71949caf3fb2695ce7f2dc1d9a8d1"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.11",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a973f635b9190f715d10987d5c00fd2815ebe3d"
        }
      ],
      "purl": "pkg:npm/glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "gulpfile.js",
            "line": 12
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "275d8edaac4f1bb3326472089e7949c8394699dd"
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f"
        }
      ],
      "purl": "pkg:npm/growl@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jade",
      "version": "0.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f10d7977d8d79f2f6ff862a81b0513ccb25686c"
        }
      ],
      "purl": "pkg:npm/jade@0.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jade@0.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa68a14f6a945d54dbbe50d8cdb3320e9e3b1a06"
        }
      ],
      "purl": "pkg:npm/commander@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bbf5ab1ba827af23575143490426455f481fe1e"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff1ed1e61169d06b3cf2d588e188b18d8847e17e"
        }
      ],
      "purl": "pkg:npm/supports-color@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-iso-string",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dc19e664dfccbe25bd8db508b00c6da158255d1"
        }
      ],
      "purl": "pkg:npm/to-iso-string@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-iso-string/-/to-iso-string-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-iso-string@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-iso-string/-/to-iso-string-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-sequence",
      "version": "1.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5095a0bebe98733b0140bd08dd80ec030ddacdeb"
        }
      ],
      "purl": "pkg:npm/run-sequence@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-sequence/-/run-sequence-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-sequence@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-sequence/-/run-sequence-1.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "run-sequence"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint",
      "version": "4.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "05356871bef23a434906734006fc188336ba824b"
        }
      ],
      "purl": "pkg:npm/tslint@4.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint/-/tslint-4.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint@4.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint/-/tslint-4.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-code-frame",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63fd43f7dc1e3bb7ce35947db8fe369a3f58c74b"
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9866df395102130e38f7f996bceb65443209c25b"
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "168a4701756b6a7f51a12ce0c97bfa28c084ed63"
        }
      ],
      "purl": "pkg:npm/colors@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42956e31312824c17b70ace2e9bbd6851ba55357d9a999efc954203613dac71b93630ca39ff8f5bfd7da96c790fee5d6c0f9cee7a4417f0b60e21fc44179ae70"
        }
      ],
      "purl": "pkg:npm/diff@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-3.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37930aa5d816b777c03445e1966cc6790a4c0b16"
        }
      ],
      "purl": "pkg:npm/findup-sync@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "5.0.15",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bc936b9e02f4a603fcc222ecf7633d30b8b93b1"
        }
      ],
      "purl": "pkg:npm/glob@5.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "gulpfile.js",
            "line": 12
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de3f98543dbf96082be48ad1a0c7cda836301dcf"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b9f9ab44e55af9681831d5f28d0aeeaf5c750cb0"
        }
      ],
      "purl": "pkg:npm/tsutils@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-notifier",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e8827a6bb915140ab093559d7014e3ebb837451"
        }
      ],
      "purl": "pkg:npm/update-notifier@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-notifier/-/update-notifier-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-notifier@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-notifier/-/update-notifier-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boxen",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cd3e37d3af8df6ab1ef23a34326979b7752474307f6f5e9ede4f50454a5fc2e7583e1059ce47d85383522b79a8460660cd09e86c72c85ee397fe0b54c165b2f"
        }
      ],
      "purl": "pkg:npm/boxen@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boxen@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-align",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c36aeccba563b89ceb556f3690f0b1d9e3547f7f"
        }
      ],
      "purl": "pkg:npm/ansi-align@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-align/-/ansi-align-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-align@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-align/-/ansi-align-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d545635be1e33c542649c69173e5de6acfae34dd"
        }
      ],
      "purl": "pkg:npm/camelcase@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "033e73251d8206e8daa76aea5c668929a3c7c89d08ad48a6bd8357fa7702cbc3c93f896d3864eb1d4228d3ded968bdb331e298a6209da83bd2eb376b4c5a24dd"
        }
      ],
      "purl": "pkg:npm/chalk@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36748e98c118b55476255308193cf29d19246b1b62ab5c6714171d403fc39cd0983e810fb1526133df010f26a834e4088bba78a24762dc4dbb78dec641bb14ba"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a319a9c88b0409b24082d7cacf47a3a6ad9e9f9b62dcecf786158c029b2e49df8c02e85d4fcdd18beb178c7e682271f61c34b1ae5450375b35ed203090499c5"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be7a0de484dec5c5cddf8b3d59125044912f635b"
        }
      ],
      "purl": "pkg:npm/supports-color@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8207af1cc7b30d446cc70b734b5e8be18f88d51"
        }
      ],
      "purl": "pkg:npm/has-flag@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-boxes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fa917c3e59c94a004cd61f8ee509da651687143"
        }
      ],
      "purl": "pkg:npm/cli-boxes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-boxes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "term-size",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "458b83887f288fc56d6fffbfad262e26638efa69"
        }
      ],
      "purl": "pkg:npm/term-size@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/term-size/-/term-size-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/term-size@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/term-size/-/term-size-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "944becd34cc41ee32a63a9faf27ad5a65fc59777"
        }
      ],
      "purl": "pkg:npm/execa@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8bd0efee58fcff6f8f94510a0a554bbfa235449"
        }
      ],
      "purl": "pkg:npm/cross-spawn@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab8b297b82937ec012d525072ced30cfc422c9fd7ebcc2008294588a81580cc36a29f1d06e0f805431f78b87efa65ef5fcfd4bd1d065f9f422f8fdfb5187f47b"
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c11f9218f076089a47dd512f93c6699a6a81d52"
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e943d1358dc37555054ecbe2edb05aa174ede14"
        }
      ],
      "purl": "pkg:npm/get-stream@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "widest-line",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0142a4e8a243f8882c0233aa0e0281aa76152273"
        }
      ],
      "purl": "pkg:npm/widest-line@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/widest-line/-/widest-line-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/widest-line/-/widest-line-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "configstore",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e683640ff2fefa5d0eeb1197c5bd44592ed28afb637c6425472c49b18804d19e3de7f2fcd5eda1e3f777afdebd8683d7b8522dccd38a32db178181b873b758bf"
        }
      ],
      "purl": "pkg:npm/configstore@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/configstore/-/configstore-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/configstore@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/configstore/-/configstore-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-prop",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b54317af1944c525ba5361178a228648155d620b55f2a9472fe0b5d13b16e0f51163f89cf9e6b2b274a4c01e2403f981942cb2fc828327e2dcdf06d679a5edb9"
        }
      ],
      "purl": "pkg:npm/dot-prop@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e4729ac1f5fde025cd7d83a896dab9f4f67db0f"
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0f92e8b8c0b27baf1be67d4becf3bb24a046b19aed2109402917c9e89f3a65eeafff156a7dceef16eb549ccf8b1dfe4522a83c6f521b686a6d9e7c3ca207370"
        }
      ],
      "purl": "pkg:npm/make-dir@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-string",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e1057cca851abb93398f8b33ae187b99caec11a"
        }
      ],
      "purl": "pkg:npm/unique-string@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-string/-/unique-string-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-string@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-string/-/unique-string-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-random-string",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a230f64f568310e1498009940790ec99545bca7e"
        }
      ],
      "purl": "pkg:npm/crypto-random-string@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-random-string@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6e3de2b839d8d6aad7e2e7dca5bd52f4627df9485df381c01cbfbac13c51d56846a9683af819d1a09b78fb7244f01fdc072fb7c69a07c09dbd3e4c7ac76fcb4"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "496b2cc109eca8dbacfe2dc72b603c17c5870ad4"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-lazy",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "05698e3d45c88e8d7e9d92cb0584e77f096f3e43"
        }
      ],
      "purl": "pkg:npm/import-lazy@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-lazy@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-installed-globally",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dfd98f5a9111716dd535dda6492f67bf3d25a80"
        }
      ],
      "purl": "pkg:npm/is-installed-globally@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-installed-globally@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-dirs",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b319c0dd4607f353f3be9cca4c72fc148c49f445"
        }
      ],
      "purl": "pkg:npm/global-dirs@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-dirs/-/global-dirs-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-dirs@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-dirs/-/global-dirs-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-npm",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f2fb63a65e4905b406c86072765a1a4dc793b9f4"
        }
      ],
      "purl": "pkg:npm/is-npm@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-npm@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a205383fea322b33b5ae3b18abee0dc2f356ee15"
        }
      ],
      "purl": "pkg:npm/latest-version@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/latest-version/-/latest-version-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/latest-version/-/latest-version-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8869a0401253661c4c4ca3da6c2121ed555f5eed"
        }
      ],
      "purl": "pkg:npm/package-json@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json/-/package-json-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json/-/package-json-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "6.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "240cd05785a9a18e561dc1b44b41c763ef1e8db0"
        }
      ],
      "purl": "pkg:npm/got@6.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-6.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@6.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-6.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-error-class",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06be7abef947a3f14a30fd610671d401bca8b7b6"
        }
      ],
      "purl": "pkg:npm/create-error-class@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-error-class@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "capture-stack-trace",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a6fa07399c26bba47f0b2496b4d0fb408c5550d"
        }
      ],
      "purl": "pkg:npm/capture-stack-trace@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/capture-stack-trace@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer3",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
        }
      ],
      "purl": "pkg:npm/duplexer3@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer3@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-redirect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1d03dded53bd8db0f30c26e4f95d36fc7c87dc24"
        }
      ],
      "purl": "pkg:npm/is-redirect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-redirect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11a060568b67339444033d0125a61a20d564fb34"
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e3366b39e7f5457e35f1324bdf6f88d0bfc7306"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timed-out",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f32eacac5a175bea25d7fab565ab3ed8741ef56f"
        }
      ],
      "purl": "pkg:npm/timed-out@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timed-out/-/timed-out-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timed-out@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timed-out/-/timed-out-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unzip-response",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2f0f737d16b0615e72a6935ed04214572d56f97"
        }
      ],
      "purl": "pkg:npm/unzip-response@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unzip-response/-/unzip-response-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unzip-response@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unzip-response/-/unzip-response-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse-lax",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7af8f303645e9bd79a272e7a14ac68bc0609da73"
        }
      ],
      "purl": "pkg:npm/url-parse-lax@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prepend-http",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
        }
      ],
      "purl": "pkg:npm/prepend-http@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-auth-token",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb0d3289ee0d9ada2cbb52af5dfe66cb070d3006"
        }
      ],
      "purl": "pkg:npm/registry-auth-token@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-auth-token@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8ce9cb57e8d64d9c7badd9876c7c34cbe3c7077"
        }
      ],
      "purl": "pkg:npm/rc@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rc/-/rc-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48b699c27e334bf89f10892be432f6e4c7d34a7f"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.4.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d4ef870f73dde1d77f0cf9a381432444e174942"
        }
      ],
      "purl": "pkg:npm/registry-url@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-diff",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4bbb8437c8d37e4b0cf1a68fd726ec6d645d6d36"
        }
      ],
      "purl": "pkg:npm/semver-diff@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-diff@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint-eslint-rules",
      "version": "3.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e43efdcdd760d6285600031720f972c92f4a058a"
        }
      ],
      "purl": "pkg:npm/tslint-eslint-rules@3.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint-eslint-rules/-/tslint-eslint-rules-3.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint-eslint-rules@3.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint-eslint-rules/-/tslint-eslint-rules-3.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cb860359ba3be90e040b26b729ce4bfa654c523"
        }
      ],
      "purl": "pkg:npm/doctrine@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-0.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c01ccaa9ae4b897c6d0c3e210ae52f3c7a844375"
        }
      ],
      "purl": "pkg:npm/esutils@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "2.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c5b6fd7f6de0914269027f03c0946758f7673a4"
        }
      ],
      "purl": "pkg:npm/typescript@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-2.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "typescript"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "exampleTypescript/package.json"
          },
          {
            "location": "spec/install/package.json"
          },
          {
            "location": "testapp/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vrsource-tslint-rules",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3cf8026e1d3a9b63d263dd591248dc96dc3ec1c"
        }
      ],
      "purl": "pkg:npm/vrsource-tslint-rules@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vrsource-tslint-rules/-/vrsource-tslint-rules-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vrsource-tslint-rules@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vrsource-tslint-rules/-/vrsource-tslint-rules-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "adf53529c8d4af02ef24fb8d5341c1419d33e2f7"
        }
      ],
      "purl": "pkg:npm/bower@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower/-/bower-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower/-/bower-1.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "0.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d724a719b5acf5c0b840b4224715e838406a419"
        }
      ],
      "purl": "pkg:npm/del@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-0.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "del"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "each-async",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dee5229bdf0ab6ba2012a395e1b869abf8813473"
        }
      ],
      "purl": "pkg:npm/each-async@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/each-async/-/each-async-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/each-async@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/each-async/-/each-async-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
        }
      ],
      "purl": "pkg:npm/onetime@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-immediate-shim",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
        }
      ],
      "purl": "pkg:npm/set-immediate-shim@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-immediate-shim@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbec63df724b4bea458b79a16cc0e3b1f2ca8620"
        }
      ],
      "purl": "pkg:npm/globby@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12e2c9b706bed47c8b483b57e487473fb0861f3a"
        }
      ],
      "purl": "pkg:npm/array-differ@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ede98088330665e699e1ebf0227cbc6034e627db"
        }
      ],
      "purl": "pkg:npm/array-union@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5861f3ed4e4bb6175597a4e078e8aa78ebe958c7"
        }
      ],
      "purl": "pkg:npm/array-uniq@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aea74d5e61c1f899613bf64bda66d4c78f2fd17d"
        }
      ],
      "purl": "pkg:npm/async@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-in-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6477582b8214d602346094567003be8a9eac04dc"
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96b79ec0b2bf0658219b1b5f1f7e986158358bc20071ee1323ba1aa3be48d60db8e7ee8172da935508813f761427d0ba0d039726691847d5fd7c22ed08e25ce7"
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dgeni",
      "version": "0.4.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e42775b1386ca5eb824753ac2cd169d8f61ced1"
        }
      ],
      "purl": "pkg:npm/dgeni@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dgeni/-/dgeni-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dgeni@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dgeni/-/dgeni-0.4.9.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "dgeni"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "canonical-path",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e31eb937a8c93ee2a01df1839794721902874574"
        }
      ],
      "purl": "pkg:npm/canonical-path@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/canonical-path/-/canonical-path-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/canonical-path@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/canonical-path/-/canonical-path-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dependency-graph",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "302e58218d85c51a97638730dbf9b7d852a19693"
        }
      ],
      "purl": "pkg:npm/dependency-graph@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dependency-graph/-/dependency-graph-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dependency-graph@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dependency-graph/-/dependency-graph-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "di",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "806649326ceaa7caa3306d75d985ea2748ba913c"
        }
      ],
      "purl": "pkg:npm/di@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/di@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.10.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
        }
      ],
      "purl": "pkg:npm/lodash@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "objectdiff",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d7a15be6cb8670df8a490cc6be12a4f05ea82f4"
        }
      ],
      "purl": "pkg:npm/objectdiff@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/objectdiff/-/objectdiff-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/objectdiff@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/objectdiff/-/objectdiff-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate.js",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8acf0144f1520a19835c6cc663f45e0836aa56c8"
        }
      ],
      "purl": "pkg:npm/validate.js@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate.js/-/validate.js-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate.js@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate.js/-/validate.js-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "winston",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "808050b93d52661ed9fb6c26b3f0c826708b0aee"
        }
      ],
      "purl": "pkg:npm/winston@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/winston/-/winston-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/winston@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/winston/-/winston-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8fc04ca3a13784ade9e1641af98578cfbd647a9"
        }
      ],
      "purl": "pkg:npm/async@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0433f44d809680fdeb60ed260f1b0c262e82a40b"
        }
      ],
      "purl": "pkg:npm/colors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cycle",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21e80b2be8580f98b468f379430662b046c34ad2"
        }
      ],
      "purl": "pkg:npm/cycle@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cycle/-/cycle-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cycle@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cycle/-/cycle-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eyes",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62cf120234c683785d902348a800ef3e0cc20bc0"
        }
      ],
      "purl": "pkg:npm/eyes@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eyes@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stack-trace",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "547c70b347e8d32b4e108ea1a2a159e5fdde19c0"
        }
      ],
      "purl": "pkg:npm/stack-trace@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-trace@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dgeni-packages",
      "version": "0.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42bb561bd464f7d28e03d4e2bcc255d605a34d35"
        }
      ],
      "purl": "pkg:npm/dgeni-packages@0.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dgeni-packages/-/dgeni-packages-0.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dgeni-packages@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dgeni-packages/-/dgeni-packages-0.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "catharsis",
      "version": "0.8.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98cc890ca652dd2ef0e70b37925310ff9e90fc8b"
        }
      ],
      "purl": "pkg:npm/catharsis@0.8.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/catharsis@0.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore-contrib",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "665b66c24783f8fa2b18c9f8cbb0e2c7d48c26c7"
        }
      ],
      "purl": "pkg:npm/underscore-contrib@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore-contrib@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b38b10cacdef63337b8b24e4ff86d45aea529a8"
        }
      ],
      "purl": "pkg:npm/underscore@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "change-case",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c4fde3f063bb41d00cd68e0d5a09db61cbe894f"
        }
      ],
      "purl": "pkg:npm/change-case@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/change-case/-/change-case-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/change-case@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/change-case/-/change-case-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1aca7c4d195359a2ce9955793433c6e5542511f2"
        }
      ],
      "purl": "pkg:npm/camel-case@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sentence-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8034aafc2145772d3abe1509aa42c9e1042dc139"
        }
      ],
      "purl": "pkg:npm/sentence-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sentence-case/-/sentence-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sentence-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sentence-case/-/sentence-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a2cabd1b9e8e0ae993a4bf7d5875c39c42e8eac"
        }
      ],
      "purl": "pkg:npm/lower-case@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6b4501c2ec4cdd26ba78be7222961de77621598"
        }
      ],
      "purl": "pkg:npm/upper-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constant-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ec2ca5ba343e00aa38dbf4e200fd5ac907efd63"
        }
      ],
      "purl": "pkg:npm/constant-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constant-case/-/constant-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constant-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constant-case/-/constant-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snake-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c2f25e305158d9a18d3d977066187fef8a5a66a"
        }
      ],
      "purl": "pkg:npm/snake-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snake-case/-/snake-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snake-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snake-case/-/snake-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e73826900de28d6de5480bc1de31d0842b06bec"
        }
      ],
      "purl": "pkg:npm/dot-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-case/-/dot-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-case/-/dot-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-lower-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e147be4768dc466db3bfb21cc60b31e6ad69393"
        }
      ],
      "purl": "pkg:npm/is-lower-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-lower-case/-/is-lower-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-lower-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-lower-case/-/is-lower-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-upper-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d0b1fa7e7933a1e58483600ec7d9661cbaf756f"
        }
      ],
      "purl": "pkg:npm/is-upper-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-upper-case/-/is-upper-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-upper-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-upper-case/-/is-upper-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case-first",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5da7c26f29a7073be02d52bac9980e5922adfa1"
        }
      ],
      "purl": "pkg:npm/lower-case-first@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case-first/-/lower-case-first-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case-first@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case-first/-/lower-case-first-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcb091a43c259b9228f1c341e7b6a44ea0bf9743"
        }
      ],
      "purl": "pkg:npm/param-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascal-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e5d64a20043830a7c49344c2d74b41be0c9c99b"
        }
      ],
      "purl": "pkg:npm/pascal-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascal-case/-/pascal-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascal-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascal-case/-/pascal-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case-first",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5d79bedcff14419518fd2edb0a0507c9b6859115"
        }
      ],
      "purl": "pkg:npm/upper-case-first@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case-first@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50ce6ba0d3bed3dd0b5c2a9c4553697434409514"
        }
      ],
      "purl": "pkg:npm/path-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-case/-/path-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-case/-/path-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "swap-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c39203a4587385fad3c850a0bd1bcafa081974e3"
        }
      ],
      "purl": "pkg:npm/swap-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/swap-case/-/swap-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/swap-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/swap-case/-/swap-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "title-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fae4a6ae546bfa22d083a0eea910a40d12ed4f5a"
        }
      ],
      "purl": "pkg:npm/title-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/title-case/-/title-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/title-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/title-case/-/title-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "2.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df691b9310889402aeb29cc066708c56690b854b"
        }
      ],
      "purl": "pkg:npm/espree@2.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dee3fed31fcd469618ce7342099fc1afa0bdb13"
        }
      ],
      "purl": "pkg:npm/estraverse@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bdf87acca0f3f9e53fa4fcceb0f4b4cbb00b338"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "892e47000a99be55bbf3774ffea0561d8879c259"
        }
      ],
      "purl": "pkg:npm/domhandler@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1958cc0b4c9426e9ed367fb1c8e854891b0fa3ff"
        }
      ],
      "purl": "pkg:npm/domutils@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "2.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fadd834b9683073da179b3eae6d9c0d15053f73e"
        }
      ],
      "purl": "pkg:npm/lodash@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-html-encoder",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8973618d727da5526a830b47d07c0d803e0a15c6"
        }
      ],
      "purl": "pkg:npm/node-html-encoder@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-html-encoder/-/node-html-encoder-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-html-encoder@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-html-encoder/-/node-html-encoder-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nunjucks",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ddd10a8364b1a64d3e3d7d2a8d4368131d39042"
        }
      ],
      "purl": "pkg:npm/nunjucks@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nunjucks/-/nunjucks-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nunjucks@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nunjucks/-/nunjucks-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "0.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be204f5b9634e009311256e5d6e8e0e508284d2f"
        }
      ],
      "purl": "pkg:npm/chokidar@0.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-0.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@0.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-0.12.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b67e99edcddf96541e44af56290cd7d5c6e70439"
        }
      ],
      "purl": "pkg:npm/async-each@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaf1a9b463be9a8190fc9ae163aa1ac934aa340b"
        }
      ],
      "purl": "pkg:npm/readdirp@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cd2cdb228a4a3f36e95efa6cc142de7d1a136d0"
        }
      ],
      "purl": "pkg:npm/graceful-fs@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11872aeedee89268110b10a718448ffb10112a14"
        }
      ],
      "purl": "pkg:npm/q@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "q,Promise,q/Promise,when,q/when"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/bpRunner.js",
            "line": 4
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/browserStack.js",
            "line": 3
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 10
          },
          {
            "location": "built/driverProviders/driverProvider.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/hosted.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/kobiton.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 13
          },
          {
            "location": "built/driverProviders/sauce.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/testObject.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/useExistingWebDriver.js",
            "line": 8
          },
          {
            "location": "built/frameworks/debugprint.js",
            "line": 2
          },
          {
            "location": "built/frameworks/explorer.js",
            "line": 1
          },
          {
            "location": "built/frameworks/jasmine.js",
            "line": 1
          },
          {
            "location": "built/frameworks/mocha.js",
            "line": 1
          },
          {
            "location": "built/launcher.js",
            "line": 8
          },
          {
            "location": "built/plugins.js",
            "line": 3
          },
          {
            "location": "built/runner.js",
            "line": 4
          },
          {
            "location": "built/taskRunner.js",
            "line": 5
          },
          {
            "location": "built/util.js",
            "line": 4
          },
          {
            "location": "lib/frameworks/debugprint.js",
            "line": 2
          },
          {
            "location": "lib/frameworks/explorer.js",
            "line": 1
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 1
          },
          {
            "location": "lib/frameworks/mocha.js",
            "line": 1
          },
          {
            "location": "scripts/interactive_tests/interactive_test_util.js",
            "line": 2
          },
          {
            "location": "spec/onPrepare/asyncstartup.js",
            "line": 1
          },
          {
            "location": "spec/plugins/plugins/async_plugin.js",
            "line": 1
          },
          {
            "location": "spec/plugins/plugins/failing_plugin.js",
            "line": 1
          },
          {
            "location": "lib/bpRunner.ts",
            "line": 2
          },
          {
            "location": "lib/bpRunner.ts",
            "line": 18
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 31
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 36
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 75
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 84
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 8
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 46
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 97
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 117
          },
          {
            "location": "lib/driverProviders/hosted.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/hosted.ts",
            "line": 27
          },
          {
            "location": "lib/driverProviders/kobiton.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/kobiton.ts",
            "line": 24
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 11
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 158
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 38
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 50
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 60
          },
          {
            "location": "lib/driverProviders/testObject.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/testObject.ts",
            "line": 24
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 29
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 34
          },
          {
            "location": "lib/launcher.ts",
            "line": 6
          },
          {
            "location": "lib/launcher.ts",
            "line": 114
          },
          {
            "location": "lib/launcher.ts",
            "line": 126
          },
          {
            "location": "lib/launcher.ts",
            "line": 246
          },
          {
            "location": "lib/plugins.ts",
            "line": 1
          },
          {
            "location": "lib/plugins.ts",
            "line": 482
          },
          {
            "location": "lib/plugins.ts",
            "line": 511
          },
          {
            "location": "lib/runner.ts",
            "line": 2
          },
          {
            "location": "lib/runner.ts",
            "line": 119
          },
          {
            "location": "lib/runner.ts",
            "line": 123
          },
          {
            "location": "lib/runner.ts",
            "line": 384
          },
          {
            "location": "lib/runner.ts",
            "line": 441
          },
          {
            "location": "lib/runner.ts",
            "line": 468
          },
          {
            "location": "lib/taskRunner.ts",
            "line": 3
          },
          {
            "location": "lib/taskRunner.ts",
            "line": 68
          },
          {
            "location": "lib/util.ts",
            "line": 2
          },
          {
            "location": "lib/util.ts",
            "line": 39
          },
          {
            "location": "lib/util.ts",
            "line": 48
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q-io",
      "version": "1.10.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "90473f797398eb1208b7edd468ed1785ad7baacd"
        }
      ],
      "purl": "pkg:npm/q-io@1.10.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q-io/-/q-io-1.10.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q-io@1.10.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q-io/-/q-io-1.10.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collections",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f23026b2ef36f927eecc901e99c5f0d48fa334e"
        }
      ],
      "purl": "pkg:npm/collections@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collections/-/collections-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collections@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collections/-/collections-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "weak-map",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b66e56a9df0bd25a76bbf1b514db129080614a37"
        }
      ],
      "purl": "pkg:npm/weak-map@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/weak-map/-/weak-map-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/weak-map@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/weak-map/-/weak-map-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10"
        }
      ],
      "purl": "pkg:npm/mime@1.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimeparse",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dafb02752370fd226093ae3152c271af01ac254a"
        }
      ],
      "purl": "pkg:npm/mimeparse@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimeparse/-/mimeparse-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimeparse@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimeparse/-/mimeparse-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "0.9.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4de2e6cb3b29088c9e4cbc03bf9d42fb96ce2f75"
        }
      ],
      "purl": "pkg:npm/q@0.9.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-0.9.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@0.9.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-0.9.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "q,Promise,q/Promise,when,q/when"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/bpRunner.js",
            "line": 4
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/browserStack.js",
            "line": 3
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 10
          },
          {
            "location": "built/driverProviders/driverProvider.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/hosted.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/kobiton.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 13
          },
          {
            "location": "built/driverProviders/sauce.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/testObject.js",
            "line": 8
          },
          {
            "location": "built/driverProviders/useExistingWebDriver.js",
            "line": 8
          },
          {
            "location": "built/frameworks/debugprint.js",
            "line": 2
          },
          {
            "location": "built/frameworks/explorer.js",
            "line": 1
          },
          {
            "location": "built/frameworks/jasmine.js",
            "line": 1
          },
          {
            "location": "built/frameworks/mocha.js",
            "line": 1
          },
          {
            "location": "built/launcher.js",
            "line": 8
          },
          {
            "location": "built/plugins.js",
            "line": 3
          },
          {
            "location": "built/runner.js",
            "line": 4
          },
          {
            "location": "built/taskRunner.js",
            "line": 5
          },
          {
            "location": "built/util.js",
            "line": 4
          },
          {
            "location": "lib/frameworks/debugprint.js",
            "line": 2
          },
          {
            "location": "lib/frameworks/explorer.js",
            "line": 1
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 1
          },
          {
            "location": "lib/frameworks/mocha.js",
            "line": 1
          },
          {
            "location": "scripts/interactive_tests/interactive_test_util.js",
            "line": 2
          },
          {
            "location": "spec/onPrepare/asyncstartup.js",
            "line": 1
          },
          {
            "location": "spec/plugins/plugins/async_plugin.js",
            "line": 1
          },
          {
            "location": "spec/plugins/plugins/failing_plugin.js",
            "line": 1
          },
          {
            "location": "lib/bpRunner.ts",
            "line": 2
          },
          {
            "location": "lib/bpRunner.ts",
            "line": 18
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 31
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 36
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 75
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 84
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 8
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 46
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 97
          },
          {
            "location": "lib/driverProviders/driverProvider.ts",
            "line": 117
          },
          {
            "location": "lib/driverProviders/hosted.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/hosted.ts",
            "line": 27
          },
          {
            "location": "lib/driverProviders/kobiton.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/kobiton.ts",
            "line": 24
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 11
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 158
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 38
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 50
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 60
          },
          {
            "location": "lib/driverProviders/testObject.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/testObject.ts",
            "line": 24
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 29
          },
          {
            "location": "lib/driverProviders/useExistingWebDriver.ts",
            "line": 34
          },
          {
            "location": "lib/launcher.ts",
            "line": 6
          },
          {
            "location": "lib/launcher.ts",
            "line": 114
          },
          {
            "location": "lib/launcher.ts",
            "line": 126
          },
          {
            "location": "lib/launcher.ts",
            "line": 246
          },
          {
            "location": "lib/plugins.ts",
            "line": 1
          },
          {
            "location": "lib/plugins.ts",
            "line": 482
          },
          {
            "location": "lib/plugins.ts",
            "line": 511
          },
          {
            "location": "lib/runner.ts",
            "line": 2
          },
          {
            "location": "lib/runner.ts",
            "line": 119
          },
          {
            "location": "lib/runner.ts",
            "line": 123
          },
          {
            "location": "lib/runner.ts",
            "line": 384
          },
          {
            "location": "lib/runner.ts",
            "line": 441
          },
          {
            "location": "lib/runner.ts",
            "line": 468
          },
          {
            "location": "lib/taskRunner.ts",
            "line": 3
          },
          {
            "location": "lib/taskRunner.ts",
            "line": 68
          },
          {
            "location": "lib/util.ts",
            "line": 2
          },
          {
            "location": "lib/util.ts",
            "line": 39
          },
          {
            "location": "lib/util.ts",
            "line": 48
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a0d2d70d01f63d3401ea4b050822601b462ee6b"
        }
      ],
      "purl": "pkg:npm/qs@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url2",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4eaabd1d5c3ac90d62ab4485c998422865a04b1a"
        }
      ],
      "purl": "pkg:npm/url2@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url2/-/url2-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url2@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url2/-/url2-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c54982b996c76ef0c1e6b59fbdc5825f5b713113"
        }
      ],
      "purl": "pkg:npm/shelljs@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-list",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3788ffb5c80b24afbe8283934e9e6684ea6a218d"
        }
      ],
      "purl": "pkg:npm/spdx-license-list@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-list@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringmap",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "556c137b258f942b8776f5b2ef582aa069d7d1b1"
        }
      ],
      "purl": "pkg:npm/stringmap@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringmap@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "winston",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ae313ba73fcdc2ecb4aa2f9cd446e8298677266"
        }
      ],
      "purl": "pkg:npm/winston@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/winston/-/winston-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/winston@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/winston/-/winston-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6bbe0b0674b9d719708ca38de8c237cb526c3d1"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2423fe6678ac0c5dae8852e5d0e5be08c997abcc"
        }
      ],
      "purl": "pkg:npm/colors@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.16.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "872fe445ae72de266b37879d6ad7dc948fa01cad"
        }
      ],
      "purl": "pkg:npm/request@2.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.16.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c55013856c8194ec854a0cbec90aab5a04ce3ac5"
        }
      ],
      "purl": "pkg:npm/aws-sign@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-jar",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64ecc06ac978db795e4b5290cbe48ba3781400fa"
        }
      ],
      "purl": "pkg:npm/cookie-jar@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-jar@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e1c25c7ad44e09c38f233876c76fcc24ff843b1f"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "db345a5378d86aeeb1ed5d553b869ac192d2f5ed"
        }
      ],
      "purl": "pkg:npm/form-data@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0137e657baa5a7541c57ac37ac5fc07d73b4dc1f"
        }
      ],
      "purl": "pkg:npm/combined-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4b1f43a93e8296dfe02694f4680bc37a313c73f"
        }
      ],
      "purl": "pkg:npm/delayed-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "0.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b361dee95a931640e6d504e05609a8fc3ac45d2"
        }
      ],
      "purl": "pkg:npm/hawk@0.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@0.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8cdb041435912741628c044ecc732d1d17c09ea"
        }
      ],
      "purl": "pkg:npm/boom@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.7.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60fbd904557541cd2b8795abf308a1b3770e155a"
        }
      ],
      "purl": "pkg:npm/hoek@0.7.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a556734f06d24ba34862ae9cb9e709a3afbff1c"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ef481b951a7b29affdf4afd7f26838fc1120f84"
        }
      ],
      "purl": "pkg:npm/sntp@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9db7b0e530c7f289c5e8c8432af191c2ff75a5b3"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-uuid",
      "version": "1.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b040eb0923968afabf8d32fb1f17f1167fdab907"
        }
      ],
      "purl": "pkg:npm/node-uuid@1.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-uuid@1.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a0e6a1715daed062f322b622b7fe5afd1035b6e2"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31b1ad058567651c526921506b9a8793911a0384"
        }
      ],
      "purl": "pkg:npm/qs@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6853c2afb1b2109e45629e492bde35f459ea69e8"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3efe4810741491bb1c8f67df526d6b2e0dd57790"
        }
      ],
      "purl": "pkg:npm/esprima@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fancy-log",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f41125e3d84f2e7d89a43d06d958c8f78be16be1"
        }
      ],
      "purl": "pkg:npm/fancy-log@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fancy-log@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-support",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246"
        }
      ],
      "purl": "pkg:npm/color-support@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-support@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glogg",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca762a5cba25b8129ff57191d60039f721098ac20bed81c41f8c6bdd9ce21c1e7fca5e2a59f68af09b3d8c67ba801182482295aa2c8edf45a7459003bde99437"
        }
      ],
      "purl": "pkg:npm/glogg@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glogg/-/glogg-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glogg@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glogg/-/glogg-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "liftoff",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2009291bb31cea861bbf10a7c15a28caf75c31ec"
        }
      ],
      "purl": "pkg:npm/liftoff@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/liftoff/-/liftoff-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/liftoff@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/liftoff/-/liftoff-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9326b1488c22d1a6088650a86901b2d9a90a2cbc"
        }
      ],
      "purl": "pkg:npm/findup-sync@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-file",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0d66d03672a825cb1b73bdb3fe62310c8e552b7"
        }
      ],
      "purl": "pkg:npm/detect-file@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-file/-/detect-file-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-file@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-file/-/detect-file-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca4b6dacb3d0af3d4f5097178f0b135231a83c9eb84ad206344da51950f573d0ae82e27e2fbfe76afb04f0870336774ea0232f615d2a73f7b17d56cc1e4521bc"
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6461074febfec71e7e15235761a329a5dc7c520"
        }
      ],
      "purl": "pkg:npm/arr-diff@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
        }
      ],
      "purl": "pkg:npm/array-unique@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f83bc51045d1a230b5928b3b00a665d5403052e8a0adedd49ec602ca0661f91ebd4266aeefb27b1c161f28475b0fd5a6f5663d2e087084cd9795e927d47f7ac"
        }
      ],
      "purl": "pkg:npm/braces@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
        }
      ],
      "purl": "pkg:npm/define-property@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9e8ace56a90195ee97a8a03c8b98d10f52ba6cf7e4975f973da4bdf1101fb87bd1e71ae0daee607b907c47c3809ba92f64d53da1387de688bf27f16b62615b6"
        }
      ],
      "purl": "pkg:npm/is-descriptor@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b98671d391c56c3dfab1dc02a5cadb483dbec9f97ca41ef24fd81f5b6438e584b22812ae17a0aeb8560edba199555982ba2d463de1d60f104ecb87466464a71"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3990b39c9c7d17a833be16fb9a2d7f030e3675f0218593b572807e3442828f510856e1edabbccd2bc14ab4b7c2100cec1849e2cad3553dd0e8f305399ed90a8"
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8db457cb5166b40a028d0915988558c2ebaa0c551b68e7838e679dd6d3863ebb0c86d240e2b0fdb64800d05d6a2778111515dc1d856475e68fe74439ac4fe32d"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
        }
      ],
      "purl": "pkg:npm/extend-shallow@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d544811d428f98eb06a63dc402d2403c328c38f7"
        }
      ],
      "purl": "pkg:npm/fill-range@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c80c17b9dfebe599e27367e0d4dd5590141db38"
        }
      ],
      "purl": "pkg:npm/to-regex-range@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e12b5487faded3e3dea0ac91e9400bf75b401370"
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base",
      "version": "0.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e53e8fe313e0a69d180c5bd25b0119e0da04dda3384014170f39956eb6829058fccc733e99b6bc4b2a81e436d95b247b9981e8e98ec1750a373280389b44de42"
        }
      ],
      "purl": "pkg:npm/base@0.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cache-base",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00a71d4e71525804dde7f1823d1c6bd82870209f3909ecab1328d11e52b1439e9de1724c1b29b4b8088a9f4c5b2ce18e977fb24693938b8f38755084739014cd"
        }
      ],
      "purl": "pkg:npm/cache-base@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-base@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collection-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4bc0373c164bc3291b4d368c829cf1a80a59dca0"
        }
      ],
      "purl": "pkg:npm/collection-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collection-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
        }
      ],
      "purl": "pkg:npm/map-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-visit",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f79c4493af0c5377b59fe39d395e41042dd045bb"
        }
      ],
      "purl": "pkg:npm/object-visit@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-visit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "137918d6d78283f7df7a6b7c5a63e140e69425e6"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-value",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
        }
      ],
      "purl": "pkg:npm/get-value@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-value@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18b281da585b1c5c51def24c930ed29a0be6b177"
        }
      ],
      "purl": "pkg:npm/has-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95b0b63fec2146619a6fe57fe75628d5a39efe4f"
        }
      ],
      "purl": "pkg:npm/has-values@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-value",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "870d32c64f464ff1ebe722446271cd2985e4200f2654981df5d8ad61909ed7a65ccdc6842d861c7ef6977ac3400a4d8ef0ed274e23d07108465108fc24bcde7a"
        }
      ],
      "purl": "pkg:npm/set-value@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-value/-/set-value-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-value/-/set-value-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split-string",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3733558490d8a7071e5558a2f3f1eee8329f0f61be36b407952fd5fea82fefadc462e755c0470c40dc5dda587ed15ad40725cdfe826497982b3a1616bd05188b"
        }
      ],
      "purl": "pkg:npm/split-string@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split-string@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26a71aaf073b39fb2127172746131c2704028db8"
        }
      ],
      "purl": "pkg:npm/extend-shallow@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assign-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
        }
      ],
      "purl": "pkg:npm/assign-symbols@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assign-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ab9d73314f5861a0aa3d9352d976694dc897430dfcb6bf47d78c5966a24e3e8bcba5ffa5a56d581ef5b84cef83a934f40f306513a03b73f8a5dad4f9de27138"
        }
      ],
      "purl": "pkg:npm/is-extendable@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-object-path",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "297588b7b0e7e0ac08e04e672f85c1f4999e17af"
        }
      ],
      "purl": "pkg:npm/to-object-path@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-object-path@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "union-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c71c34cb5bad5dcebe3ea0cd08207ba5aa1aea4"
        }
      ],
      "purl": "pkg:npm/union-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/union-value/-/union-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/union-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/union-value/-/union-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-union",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e39b09aea9def866a8f206e288af63919bae39c4"
        }
      ],
      "purl": "pkg:npm/arr-union@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-union@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-value",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7db08f9d3d22dc7f78e53af3c3bf4666ecdfccf1"
        }
      ],
      "purl": "pkg:npm/set-value@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-value/-/set-value-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-value/-/set-value-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unset-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
        }
      ],
      "purl": "pkg:npm/unset-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unset-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b1f58bada62ca827ec0a2078025654845995e1f"
        }
      ],
      "purl": "pkg:npm/has-value@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d61de95d91dfca9b9a02089ad384bff8f62b771"
        }
      ],
      "purl": "pkg:npm/has-values@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "class-utils",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e84f6bf163eece9363c1fc7ac1aee5036930c431cfbf61faeaf3acd60dea69fef419f194319fe5067e5de083b314a33eab12479e973993899a97aeae72cc7a"
        }
      ],
      "purl": "pkg:npm/class-utils@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/class-utils@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
        }
      ],
      "purl": "pkg:npm/define-property@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af0d8af4481dc3c0ef73b0ca2fd20282112158a829c4e21abfe33dd375496e904cb9b7d0b4611abb1cbaec379d8d01ca9729a7a97820f49fe0746ab9d51b71e"
        }
      ],
      "purl": "pkg:npm/is-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b5ee648388e2c860282e793f1856fec3f301b56"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "346104ae71fa176bd4b970e1f8e95b70a5bbff039c7dd447699ed55ada82ced7c7ae2ffef982a63f9d4e7567863eea8239b6ba924d8e4dee5dd365664c1f343f"
        }
      ],
      "purl": "pkg:npm/kind-of@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "static-extend",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60809c39cbff55337226fd5e0b520f341f1fb5c6"
        }
      ],
      "purl": "pkg:npm/static-extend@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-extend@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-copy",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e7d858b781bd7c991a41ba975ed3812754e998c"
        }
      ],
      "purl": "pkg:npm/object-copy@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-copy@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "copy-descriptor",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "676f6eb3c39997c2ee1ac3a924fd6124748f578d"
        }
      ],
      "purl": "pkg:npm/copy-descriptor@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-descriptor@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mixin-deep",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "760682be887a8b59e8b0050129bd25d297c9efc2bcf92f5f96ec8847662f01e503fd0b8c6a19c59c5df162dcb97985cc8e1192b01d03b16e80d2e019c9eb6802"
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mixin-deep@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascalcase",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b363e55e8006ca6fe21784d2db22bd15d7917f14"
        }
      ],
      "purl": "pkg:npm/pascalcase@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascalcase@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-resolve",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a5b6c2fcdfc66f0d0936f7d33d0b30dc8fa9609d0c6136be2c3351ab9ca897644d15ed662498dc8fb603a9d502399d3b2d08e2053c0f09d5546b24f63bcfd8"
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atob",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19c7a760473774468f20b2d2d03372ad7d4cbf5d"
        }
      ],
      "purl": "pkg:npm/atob@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atob/-/atob-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atob/-/atob-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decode-uri-component",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb3913333458775cb84cd1a1fae062106bb87545"
        }
      ],
      "purl": "pkg:npm/decode-uri-component@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decode-uri-component@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-url",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c637fe77c893afd2a663fe21aa9080068e2052a"
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-url",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e935d7ddd73631b97659956d55128e87b5084a3"
        }
      ],
      "purl": "pkg:npm/source-map-url@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-url@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urix",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da937f7a62e21fec1fd18d49b35c2935067a6c72"
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urix@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae28a0d72f93bf22422a18a2e379993112dec8e8"
        }
      ],
      "purl": "pkg:npm/use@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use/-/use-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use/-/use-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-cache",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b9190a4f913354694840859f8a8f7084d8822264"
        }
      ],
      "purl": "pkg:npm/lazy-cache@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-cache@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-getter",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d769c182c9d5a51f409145f2fba82e5e86e80376"
        }
      ],
      "purl": "pkg:npm/set-getter@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-getter/-/set-getter-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-getter@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-getter/-/set-getter-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-node",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b6ee5e3168c62dfd1490e53477be9582001e4a6ff73321ca9414e33f0b87d870b9db6547353e48d300c8e87f6a4159a493c0e51deaa5077051951a3eda2309f"
        }
      ],
      "purl": "pkg:npm/snapdragon-node@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-node@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-util",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99b2a431d40ab235f80402f86d16138f6d5e74e7fc70ded71dd6142447be667f7d85511870cbca3dcb7522a35eefe0193e2ae7f01083390047419927aa62a565"
        }
      ],
      "purl": "pkg:npm/snapdragon-util@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-util@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15358bee4a2c83bd76377ba1dc049d0f18837aae"
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-not",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42f83e39771622df826b02af176525d6a5f157f9"
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-not@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3666fa4179042ecb81af6e02252922968e941c781b7a42b95226607c4e941c3dc46f6ed80baa03f9b85c4feb49e9c97c766b20750c675a572bcbc92c04804ba7"
        }
      ],
      "purl": "pkg:npm/extglob@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b77735e315ce30f6b6eff0f83b04151a22449622"
        }
      ],
      "purl": "pkg:npm/expand-brackets@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "posix-character-classes",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
        }
      ],
      "purl": "pkg:npm/posix-character-classes@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/posix-character-classes@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fragment-cache",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4290fad27f13e89be7f33799c6bc5a0abfff0d19"
        }
      ],
      "purl": "pkg:npm/fragment-cache@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fragment-cache@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanomatch",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff995db27caeaef130ef0369c4b1608d5bc12ccb5ae379e21183b2d022789ed71849bc7a6ee81151341e15be0147f59a9c42f5a37690807b952c741a07ab4eaa"
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanomatch@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-odd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b8a932eb028b3775c39bb09e91767accdb69088"
        }
      ],
      "purl": "pkg:npm/is-odd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-odd/-/is-odd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-odd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-odd/-/is-odd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-dir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a40644c362be82f26effe739c9bb5382046f43"
        }
      ],
      "purl": "pkg:npm/resolve-dir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-dir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-modules",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0ace91247f5d46a4e16ec346738f39ade01e146708ce706ef9ecf3efadf87170b15bab4c29b20a4eab1a71b71162086e03b46f7733a5d155b176a0675ebfb6e"
        }
      ],
      "purl": "pkg:npm/global-modules@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-modules@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-prefix",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbf743c6c14992593c655568cb66ed32c0122ebe"
        }
      ],
      "purl": "pkg:npm/global-prefix@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-prefix@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "310db70f742d259a16a369202b51af84233310d9"
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-filepath",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a632127f53aaf3d15876f5872f3ffac763d6c891"
        }
      ],
      "purl": "pkg:npm/parse-filepath@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-filepath@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74e5a8a9f96f73274045adfad06befd7c0d9fe046e1ca8b6354ff05395f5645cdd61f1f6f67922359b05de6a78389dc7e32a3d331f00fee006373a733cddf204"
        }
      ],
      "purl": "pkg:npm/is-absolute@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b0fd178ad22ab029ebb43084cb16e8f48db3c098488eb08c32217bef6df6ba41f98df69903d4cfbca5d93b465fdd4ca6c7df8fd704531b803e2230984b41b18"
        }
      ],
      "purl": "pkg:npm/is-relative@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unc-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ab1a955dd1fb3b5962df56c4adbe017a8842676e30c5661f7f7a68510dc1964ddb937cd1ddf421de5301f781822375bc28e0e9fa86e9e4cedc0e680c34ca595"
        }
      ],
      "purl": "pkg:npm/is-unc-path@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unc-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flagged-respawn",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e79ae9b2eb38bf86b3bb56bf3e0a56aa5fcabd7"
        }
      ],
      "purl": "pkg:npm/flagged-respawn@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flagged-respawn@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.map",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf83e59dc8fcc0ad5f4250e1f78b3b81bd801d37"
        }
      ],
      "purl": "pkg:npm/object.map@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.map/-/object.map-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.map/-/object.map-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-iterator",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57bef5dc85d23923ba23767324d8e8f8f3d9694b"
        }
      ],
      "purl": "pkg:npm/make-iterator@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-iterator/-/make-iterator-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-iterator@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-iterator/-/make-iterator-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natives",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1e45ac67f2eff8c0df2d1a4865736720c30bce2cc2d43149f82184dec4c81677e2f25037de5d5924db281047486f2076c9417807ba389ade2794503c0d1a410"
        }
      ],
      "purl": "pkg:npm/natives@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natives/-/natives-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natives@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natives/-/natives-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "gulp-concat",
      "version": "2.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633d16c95d88504628ad02665663cee5a4793353"
        }
      ],
      "purl": "pkg:npm/gulp-concat@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-concat/-/gulp-concat-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-concat@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-concat/-/gulp-concat-2.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-concat"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-with-sourcemaps",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62d9d2d15118f9ed8a873b1ecbfea6adaf44a0cea1ff9831682d1ede6707a40e727c3c5a7e1ca0cad3667095a876f520c97cd288be4c4a43cee9b40681f9621f"
        }
      ],
      "purl": "pkg:npm/concat-with-sourcemaps@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-with-sourcemaps@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "021f9c2cf951d6b939943c89eb5ee5add4fd924c"
        }
      ],
      "purl": "pkg:npm/vinyl@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d217d1e961118e3ac9a4b8bba3285553bf647cdb"
        }
      ],
      "purl": "pkg:npm/clone@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-buffer",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e3e25b207ac4e701af721e2cb5a16792cac3dc58"
        }
      ],
      "purl": "pkg:npm/clone-buffer@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-buffer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3782dff8bb5474e18b9b6bf0fdfe782f8777680"
        }
      ],
      "purl": "pkg:npm/clone-stats@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cloneable-readable",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6290d413f217a61232f95e458ff38418cfb0117"
        }
      ],
      "purl": "pkg:npm/cloneable-readable@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cloneable-readable@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de63128373fcbf7c3ccfa4de5a480c45a67958eb"
        }
      ],
      "purl": "pkg:npm/replace-ext@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-connect",
      "version": "2.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14ae7173328b691252b01fc1930a39cbb24fb33c"
        }
      ],
      "purl": "pkg:npm/gulp-connect@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-connect/-/gulp-connect-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-connect@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-connect/-/gulp-connect-2.3.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-connect"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "2.30.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8da9bcbe8a054d3d318d74dfec903b5c39a1b609"
        }
      ],
      "purl": "pkg:npm/connect@2.30.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-2.30.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@2.30.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-2.30.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "basic-auth-connect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fdb0b43962ca7b40456a7c2bb48fe173da2d2122"
        }
      ],
      "purl": "pkg:npm/basic-auth-connect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/basic-auth-connect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.13.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c08cf330c3358e151016a05746f13f029c97fa97"
        }
      ],
      "purl": "pkg:npm/body-parser@1.13.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.13.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.13.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.13.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 4
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac93c410e2ffc9cc7cf4b464b38289067f5e47b4"
        }
      ],
      "purl": "pkg:npm/bytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80aec64c9d6d97e65cc2a9caa93c0aa6abf73aaa"
        }
      ],
      "purl": "pkg:npm/depd@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "197e22cdebd4198585e8694ef6786197b91ed942"
        }
      ],
      "purl": "pkg:npm/http-errors@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2ecb42fd294744922209a2e7c404dac8793d8ade"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c31d9b74ec27df75e543a86c78728ed8d4623607"
        }
      ],
      "purl": "pkg:npm/qs@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b03b8d86e6f8ad29683cba8df91ddc6ffc77b395"
        }
      ],
      "purl": "pkg:npm/compression@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5f1f3928c6d95fd96558c36ec3d9d0de4a6ecea"
        }
      ],
      "purl": "pkg:npm/accepts@1.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.2.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "269d5c476810ec92edbe7b6c2f28316384f9a7e8"
        }
      ],
      "purl": "pkg:npm/negotiator@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c59a5c99db76767e9876500e271ef63b3493bd66"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "928f5d0f470d49342651ea6794b0857c100693f7"
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "99e4981566a286118dfb2b817357df7993376d10"
        }
      ],
      "purl": "pkg:npm/vary@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-timeout",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de9a5ec61e33a12b6edaab7b5f062e98c599b88e"
        }
      ],
      "purl": "pkg:npm/connect-timeout@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.6.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-timeout@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e734a5c1417fce472d5aef82c381cabb64d1a435"
        }
      ],
      "purl": "pkg:npm/cookie@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-parser",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d755570fb5d17890771227a02314d9be7cf8356"
        }
      ],
      "purl": "pkg:npm/cookie-parser@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-parser@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "csurf",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23f2a13bf1d8fce1d0c996588394442cba86a56a"
        }
      ],
      "purl": "pkg:npm/csurf@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csurf/-/csurf-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csurf@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csurf/-/csurf-1.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csrf",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b61120ddceeafc91e76ed5313bb5c0b2667b710a"
        }
      ],
      "purl": "pkg:npm/csrf@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csrf/-/csrf-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csrf@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csrf/-/csrf-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rndm",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f33fe9cfb52bbfd520aa18323bc65db110a1b76c"
        }
      ],
      "purl": "pkg:npm/rndm@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rndm/-/rndm-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rndm@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rndm/-/rndm-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsscmp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7dc4a33af71581ab4337da91d85ca5427ebd9a97"
        }
      ],
      "purl": "pkg:npm/tsscmp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsscmp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-safe",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ad6f38368c6d4c8c75ec17623fb79aa1d071d81"
        }
      ],
      "purl": "pkg:npm/uid-safe@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-safe@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "random-bytes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f68a1dc0ae58bd3fb95848c30324db75d64360b"
        }
      ],
      "purl": "pkg:npm/random-bytes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/random-bytes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errorhandler",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b7b70ed8f359e9db88092f2d20c0f831420ad83f"
        }
      ],
      "purl": "pkg:npm/errorhandler@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errorhandler@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express-session",
      "version": "1.11.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5cc98f3f5ff84ed835f91cbf0aabd0c7107400af"
        }
      ],
      "purl": "pkg:npm/express-session@1.11.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express-session/-/express-session-1.11.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express-session@1.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express-session/-/express-session-1.11.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "crc",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa622e1bc388bf257309082d6b65200ce67090ba"
        }
      ],
      "purl": "pkg:npm/crc@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crc/-/crc-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crc/-/crc-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-safe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7f3c6ca64a1f6a5d04ec0ef3e4c3d5367317137"
        }
      ],
      "purl": "pkg:npm/uid-safe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-safe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-url",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "199fd661702a0e7b7dcae6e0698bb089c52f6d78"
        }
      ],
      "purl": "pkg:npm/base64-url@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-url@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "965a52d9e8d05d2b857548541fb89b53a2497d9b"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d77d32fa98e38c2f41ae85e9278e0e0e6ba1022c"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "method-override",
      "version": "2.3.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e3daf8d5dee10dd2dce7d4ae88d62bbee77476b4"
        }
      ],
      "purl": "pkg:npm/method-override@2.3.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/method-override/-/method-override-2.3.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/method-override@2.3.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/method-override/-/method-override-2.3.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "morgan",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fd818398c6819cba28a7cd6664f292fe1c0bbf2"
        }
      ],
      "purl": "pkg:npm/morgan@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/morgan@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "basic-auth",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "030935b01de7c9b94a824b29f3fccb750d3a5290"
        }
      ],
      "purl": "pkg:npm/basic-auth@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/basic-auth@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multiparty",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35de6804dc19643e5249f3d3e3bdc6c8ce301d3f"
        }
      ],
      "purl": "pkg:npm/multiparty@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multiparty@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-counter",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ded266556319c8b0e222812b9cf3b26fa7d947de"
        }
      ],
      "purl": "pkg:npm/stream-counter@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-counter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ebc8a4a8619ff0b8a81ac1513c3434ff469fdb74"
        }
      ],
      "purl": "pkg:npm/pause@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pause/-/pause-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pause@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pause/-/pause-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "response-time",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffa71bab952d62f7c1d49b7434355fbc68dffc5a"
        }
      ],
      "purl": "pkg:npm/response-time@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/response-time/-/response-time-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/response-time@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/response-time/-/response-time-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bcd52e14c097763e749b274c4346ed2e560b5a9"
        }
      ],
      "purl": "pkg:npm/depd@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-favicon",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd419e268de012ab72b319d337f2105013f9381f"
        }
      ],
      "purl": "pkg:npm/serve-favicon@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-favicon@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a057fc6ee28dc63f64566e5fa57b111a86aecd2"
        }
      ],
      "purl": "pkg:npm/serve-index@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f3414f380321743bfc1042f9a83ff1d5824d464"
        }
      ],
      "purl": "pkg:npm/batch@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce5a6ecd3101fed5ec09827dac22a9c29bfb0535"
        }
      ],
      "purl": "pkg:npm/serve-static@1.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.10.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "765e7607c8055452bba6f0b052595350986036de"
        }
      ],
      "purl": "pkg:npm/send@0.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.13.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6872823535c692e2c2a0103826afd82c2e0ff175"
        }
      ],
      "purl": "pkg:npm/range-parser@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dded45cc18256d51ed40aec142489d5c61026d28"
        }
      ],
      "purl": "pkg:npm/statuses@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vhost",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2fb1decd4c466aa88b0f9341af33dc1aff2478d5"
        }
      ],
      "purl": "pkg:npm/vhost@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vhost/-/vhost-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vhost@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vhost/-/vhost-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-livereload",
      "version": "0.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80157d1371c9f37cc14039ab1895970d119dc3bc"
        }
      ],
      "purl": "pkg:npm/connect-livereload@0.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.5.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-livereload@0.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "tiny-lr",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3fdba802e5d56a33c2f6f10794b32e477ac729d"
        }
      ],
      "purl": "pkg:npm/tiny-lr@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tiny-lr/-/tiny-lr-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-lr@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tiny-lr/-/tiny-lr-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.14.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1015cb1fe2c443858259581db53332f8d0cf50f9"
        }
      ],
      "purl": "pkg:npm/body-parser@1.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.14.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 4
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd35464a403f6f9117c2de3609ecff9cae000588"
        }
      ],
      "purl": "pkg:npm/bytes@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9f31142af468cb72b25b30136ba2456834916be"
        }
      ],
      "purl": "pkg:npm/qs@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "websocket-driver",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0caf9d2d755d93aee049d4bdd0d3fe2cca2a24eb"
        }
      ],
      "purl": "pkg:npm/websocket-driver@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-driver@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "http-parser-js",
      "version": "0.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ea1a04fb64adff0242e9974f297dd4c3cad271e1"
        }
      ],
      "purl": "pkg:npm/http-parser-js@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-parser-js@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.4.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "websocket-extensions",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ea1d49cc5e60734f4c39ef4af62692717e2483d48ce823e1c655d777699d32362de782f4388efd5db47b79546c5f236ca3e72a8898f84e2b8be6221db131b1a"
        }
      ],
      "purl": "pkg:npm/websocket-extensions@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-extensions@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "livereload-js",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f5474fc57866bae18f8d9aa7d9872a1547370594e67cb0d94acc78e1e15bcb50b140099867ebc5eb5f90c583616132f48c26644eb85c5149ae7ad0409628132"
        }
      ],
      "purl": "pkg:npm/livereload-js@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/livereload-js/-/livereload-js-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/livereload-js@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/livereload-js/-/livereload-js-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d932e5c7ea411cca76a312d39a606200fd50cd9"
        }
      ],
      "purl": "pkg:npm/qs@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-less",
      "version": "1.3.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e129750f236693ead5b522af311cc33eeff1910e"
        }
      ],
      "purl": "pkg:npm/gulp-less@1.3.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-less/-/gulp-less-1.3.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-less@1.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-less/-/gulp-less-1.3.9.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-less"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f919a0099fe31f80fc5a1d0eb303161b394070c7"
        }
      ],
      "purl": "pkg:npm/convert-source-map@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "less",
      "version": "1.7.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f220cf7288a27eaca739df6e4808a2d4c0d5756"
        }
      ],
      "purl": "pkg:npm/less@1.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/less/-/less-1.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/less@1.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/less/-/less-1.7.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "2.2.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0590b5478b516c4903edc2d89bd3fdbdd286328c"
        }
      ],
      "purl": "pkg:npm/clean-css@2.2.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-2.2.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@2.2.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-2.2.23.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "175ad4b9317f3ff615f201c1e57224f55a3e91df"
        }
      ],
      "purl": "pkg:npm/commander@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.40.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dd670f696f1e6e842e66b4b5e839301ab9beb67"
        }
      ],
      "purl": "pkg:npm/request@2.40.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.40.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.40.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.40.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c57103f7a17fc037f02d7c2e64b602ea223f7d63"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d0e09c4921f94a27f63d3b49c5feff1ea4c5130"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91abd788aba9702b1aabfa8bc01031a2ac9e3b12"
        }
      ],
      "purl": "pkg:npm/form-data@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87cd491f9b46e4e2aeaca335416766885d2d1ed9"
        }
      ],
      "purl": "pkg:npm/hawk@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a636e9ded4efcefb19cef4947a3c67dfaee911b"
        }
      ],
      "purl": "pkg:npm/boom@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d322462badf07716ea7eb85baf88079cddce505"
        }
      ],
      "purl": "pkg:npm/hoek@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed91ff1f17ad13d3748288594f8a48a0d26f325c"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb885f18b0f3aad189f824862536bceeec750900"
        }
      ],
      "purl": "pkg:npm/sntp@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fbdac132559aa8323121e540779c0a012b27e66"
        }
      ],
      "purl": "pkg:npm/http-signature@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "559be18376d08a4ec4dbe80877d27818639b2df7"
        }
      ],
      "purl": "pkg:npm/asn1@0.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee74009413002d84cec7219c6ac811812e723160"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctype",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82c18c2461f74114ef16c135224ad0b9144ca12f"
        }
      ],
      "purl": "pkg:npm/ctype@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctype@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "995ae1392ab8affcbfcb2641dd054e943c0d5dce"
        }
      ],
      "purl": "pkg:npm/mime-types@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb540f93bb2b22a7d5941691a288d60e8ea9386e"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50a93e2b5af6691c31bcea5dae78ee6ea1903768"
        }
      ],
      "purl": "pkg:npm/qs@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringstream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e484cd4de5a0bbbee18e46307710a8a81621878"
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringstream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b618a5565b6dea90bf3425d04d55edc475a7561"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6373db76909fe570e08d73583365ed828a74eeeb"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bc146ca517c1471f5dacbe2571b2b7f9e3346"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7e8885f05e68851144b6e12a8f3678026bc4c54"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._objecttypes",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c0b7f69d98a1f76529f890b0cdb1b4dfec11c11"
        }
      ],
      "purl": "pkg:npm/lodash._objecttypes@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._objecttypes/-/lodash._objecttypes-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._objecttypes@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._objecttypes/-/lodash._objecttypes-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48dea46df8ff7632b10d706b8acb26591e2b3727"
        }
      ],
      "purl": "pkg:npm/lodash.keys@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isnative",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ea6404b784a7be836c7b57580e1cdf79b14832c"
        }
      ],
      "purl": "pkg:npm/lodash._isnative@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isnative/-/lodash._isnative-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isnative@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isnative/-/lodash._isnative-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash._shimkeys",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e9cc9666ff081f0b5a6c978b83e242e6949d203"
        }
      ],
      "purl": "pkg:npm/lodash._shimkeys@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._shimkeys/-/lodash._shimkeys-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._shimkeys@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._shimkeys/-/lodash._shimkeys-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isobject",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a2e47fe69953f1ee631a7eba1fe64d2d06558f5"
        }
      ],
      "purl": "pkg:npm/lodash.isobject@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isobject/-/lodash.isobject-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isobject@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isobject/-/lodash.isobject-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dfdd012eb9c700e2323fd334f38ac622ab372da7"
        }
      ],
      "purl": "pkg:npm/through2@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5cce7407baf642cba7becda568111c493f59665a"
        }
      ],
      "purl": "pkg:npm/xtend@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemaps-apply",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c5fcbd43e2f238423c2dc98bddd6f79b72bc345b"
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-markdown",
      "version": "1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37cdc61379fb039841fa6cab4984a8e79128a772"
        }
      ],
      "purl": "pkg:npm/gulp-markdown@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-markdown/-/gulp-markdown-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-markdown@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-markdown/-/gulp-markdown-1.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-markdown"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-clean-css",
      "version": "2.0.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c664d5e2f19faad7750d62e543b21d07f6aa3c8d"
        }
      ],
      "purl": "pkg:npm/gulp-clean-css@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-clean-css/-/gulp-clean-css-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-clean-css@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-clean-css/-/gulp-clean-css-2.0.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-clean-css"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "3.4.28",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf1945e82fc808f55695e6ddeaec01400efd03ff"
        }
      ],
      "purl": "pkg:npm/clean-css@3.4.28",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-3.4.28.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@3.4.28",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-3.4.28.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06be367febfda0c330aa1e2a072d3dc9762425d4"
        }
      ],
      "purl": "pkg:npm/commander@2.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-readlink",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725"
        }
      ],
      "purl": "pkg:npm/graceful-readlink@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-readlink@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-bufferstream",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0537869f580effa4ca45acb47579e4b9fe63081a"
        }
      ],
      "purl": "pkg:npm/vinyl-bufferstream@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-bufferstream/-/vinyl-bufferstream-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-bufferstream@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-bufferstream/-/vinyl-bufferstream-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bufferstreams",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfb1ad9568d3ba3cfe935ba9abdd952de88aab2a"
        }
      ],
      "purl": "pkg:npm/bufferstreams@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bufferstreams/-/bufferstreams-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bufferstreams@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bufferstreams/-/bufferstreams-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemaps-apply",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab6549d61d172c2b1b87be5c508d239c8ef87705"
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-rename",
      "version": "1.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ad4428763f05e2764dec1c67d868db275687817"
        }
      ],
      "purl": "pkg:npm/gulp-rename@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-rename@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-rename"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-replace",
      "version": "0.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e22bc9c03e9d051b32881cc589bd3e8c4e54168a"
        }
      ],
      "purl": "pkg:npm/gulp-replace@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-replace/-/gulp-replace-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-replace@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-replace/-/gulp-replace-0.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-replace"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.0.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "038bbb2ea9ea90385b26fbc1854d0b539f2abea3"
        }
      ],
      "purl": "pkg:npm/event-stream@3.0.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-stream/-/event-stream-3.0.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.0.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-stream/-/event-stream-3.0.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a1f07896d82b10926bd3744a2420009f88974a8"
        }
      ],
      "purl": "pkg:npm/map-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67097c601d697ce1368f418f06cd201cf0521a57"
        }
      ],
      "purl": "pkg:npm/split@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split/-/split-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split/-/split-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istextorbinary",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace19354d1a9a0173efeb1084ce0f87b0ad7decf"
        }
      ],
      "purl": "pkg:npm/istextorbinary@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istextorbinary@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binaryextensions",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e637488b35b58bda5f4774bf96a5212a8c90755"
        }
      ],
      "purl": "pkg:npm/binaryextensions@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binaryextensions@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "textextensions",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "65486393ee1f2bb039a60cbba05b0b68bd9501d2"
        }
      ],
      "purl": "pkg:npm/textextensions@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/textextensions/-/textextensions-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/textextensions@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/textextensions/-/textextensions-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replacestream",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e018d3a37724600ccd0c005990d8a21b7b54ff34"
        }
      ],
      "purl": "pkg:npm/replacestream@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replacestream/-/replacestream-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replacestream@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replacestream/-/replacestream-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine",
      "version": "2.3.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "febf0e4b4afff63c2d09211f077da0b859f5f191"
        }
      ],
      "purl": "pkg:npm/jasmine@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine/-/jasmine-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine/-/jasmine-2.3.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/jasmine.js",
            "line": 62
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 62
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-core",
      "version": "2.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ad772662b32d16c564ee25c863edae1d65a038f2"
        }
      ],
      "purl": "pkg:npm/jasmine-core@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-core@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.3.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma",
      "version": "0.12.37",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a9f7fdeccd69de2e835e04edbac2ecd3fa645e4"
        }
      ],
      "purl": "pkg:npm/karma@0.12.37",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma/-/karma-0.12.37.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma@0.12.37",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma/-/karma-0.12.37.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "karma"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "798e689778151c8076b4b360e5edd28cda2bb468"
        }
      ],
      "purl": "pkg:npm/chokidar@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1735ac82f254c7436388f1a963342377b12c7a86caffd7eae5703028b57251ec2d686591c236c7e96cac0c8d103752a6f9b45d5169eda89684ebe31a6af968c"
        }
      ],
      "purl": "pkg:npm/anymatch@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19d386a1d9edc6e7c1c85d388aedbcc56d33602d"
        }
      ],
      "purl": "pkg:npm/async-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75f16642b480f187a711c814161fd3a4a7655898"
        }
      ],
      "purl": "pkg:npm/is-binary-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46aa1751fb6a2f93ee5e689bb1087d4b14c6c205"
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ed0ad060df3073300c48440373f72d1cc642d78"
        }
      ],
      "purl": "pkg:npm/readdirp@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "0.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14ba0ceaa2197f89fa30dea9e7b09e19cd93c22f"
        }
      ],
      "purl": "pkg:npm/http-proxy@0.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-0.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@0.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-0.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utile",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "930c88e99098d6220834c356cbd9a770522d90d7"
        }
      ],
      "purl": "pkg:npm/utile@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utile/-/utile-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utile@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utile/-/utile-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "i",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d96c92732076f072711b6b10fd7d4f65ad8ee23d"
        }
      ],
      "purl": "pkg:npm/i@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/i/-/i-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/i@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/i/-/i-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ncp",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "abcc6cbd3ec2ed2a729ff6e7c1fa8f01784a8574"
        }
      ],
      "purl": "pkg:npm/ncp@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ncp/-/ncp-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ncp@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ncp/-/ncp-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log4js",
      "version": "0.6.38",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c494116695d6fb25480943d3fc872e662a522fd"
        }
      ],
      "purl": "pkg:npm/log4js@0.6.38",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log4js@0.6.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "0.9.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3bab0444e49b55fbbc157424dbd41aa375a51a76"
        }
      ],
      "purl": "pkg:npm/socket.io@0.9.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-0.9.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@0.9.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-0.9.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64id",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "02ce0fdeee0cef4f40080e1e73e834f0b1bfce3f"
        }
      ],
      "purl": "pkg:npm/base64id@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64id/-/base64id-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64id@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64id/-/base64id-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "policyfile",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6b82ead98ae79ebe228e2daf5903311ec982e4d"
        }
      ],
      "purl": "pkg:npm/policyfile@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/policyfile/-/policyfile-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/policyfile@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/policyfile/-/policyfile-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-client",
      "version": "0.9.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4da7515c5e773041d1b423970415bcc430f35fc6"
        }
      ],
      "purl": "pkg:npm/socket.io-client@0.9.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-0.9.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-client@0.9.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-0.9.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "active-x-obfuscator",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "089b89b37145ff1d9ec74af6530be5526cae1f1a"
        }
      ],
      "purl": "pkg:npm/active-x-obfuscator@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/active-x-obfuscator/-/active-x-obfuscator-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/active-x-obfuscator@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/active-x-obfuscator/-/active-x-obfuscator-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zeparser",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "03726561bc268f2e5444f54c665b7fd4a8c029e2"
        }
      ],
      "purl": "pkg:npm/zeparser@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zeparser/-/zeparser-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zeparser@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zeparser/-/zeparser-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b542c2c76f78efb34b200b20177634330ff702b6"
        }
      ],
      "purl": "pkg:npm/uglify-js@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "0.4.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "787a6154414f3c99ed83c5772153b20feb0cec32"
        }
      ],
      "purl": "pkg:npm/ws@0.4.32",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-0.4.32.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@0.4.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-0.4.32.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d121bbae860d9992a3d517ba96f56588e47c6781"
        }
      ],
      "purl": "pkg:npm/commander@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae24f8850818d662fcab5acf7f3b95bfaa2ccf38"
        }
      ],
      "purl": "pkg:npm/nan@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "options",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec22d312806bb53e731773e7cdaefcf1c643128f"
        }
      ],
      "purl": "pkg:npm/options@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/options/-/options-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/options@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/options/-/options-0.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "320b5a52d83abb5978d81a3e887d4aefb15a6164"
        }
      ],
      "purl": "pkg:npm/tinycolor@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinycolor/-/tinycolor-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinycolor/-/tinycolor-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlhttprequest",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01453a1d9bed1e8f172f6495bbf4c8c426321500"
        }
      ],
      "purl": "pkg:npm/xmlhttprequest@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlhttprequest/-/xmlhttprequest-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlhttprequest@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlhttprequest/-/xmlhttprequest-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "redis",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee57b7a44d25ec1594e44365d8165fa7d1d4811a"
        }
      ],
      "purl": "pkg:npm/redis@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redis/-/redis-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redis@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redis/-/redis-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "useragent",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf593ef4f2d175875e8bb658ea92e18a4fd06d8e"
        }
      ],
      "purl": "pkg:npm/useragent@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/useragent/-/useragent-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/useragent@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/useragent/-/useragent-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c658619becf14031d0d0b594b16042ce4dc063d"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-chrome-launcher",
      "version": "0.1.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ac0e22e573650f6541312fdca795c3824ccf962"
        }
      ],
      "purl": "pkg:npm/karma-chrome-launcher@0.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-0.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-chrome-launcher@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-0.1.12.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "karma-chrome-launcher"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-jasmine",
      "version": "0.1.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30545057698ebdcbc63132d47be125b75b2fbc55"
        }
      ],
      "purl": "pkg:npm/karma-jasmine@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-jasmine@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-0.1.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "karma-jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "@angular",
      "name": "common",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5a77a7bea1943296cff08a9ff60ebcbfb58ad8b"
        }
      ],
      "purl": "pkg:npm/%40angular/common@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/common/-/common-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/common@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/common/-/common-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/common"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 11
          },
          {
            "location": "testapp/ng1/form/form.html",
            "line": 7
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 8
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 15
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 22
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 29
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6946af2d1d651a7b1863b531d6e5afa41aa44eac"
        }
      ],
      "purl": "pkg:npm/tslib@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@angular",
      "name": "compiler",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60551454f2d8bac9802203d9de7e1efb9bc7d02b"
        }
      ],
      "purl": "pkg:npm/%40angular/compiler@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/compiler/-/compiler-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/compiler@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/compiler/-/compiler-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/compiler"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/main.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "core",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48e0c693148f1c96c1526c9be97b59e5299337c5"
        }
      ],
      "purl": "pkg:npm/%40angular/core@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/core/-/core-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/core@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/core/-/core-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/core,Component,@angular/core/Component,NgModule,@angular/core/NgModule,NgZone,@angular/core/NgZone,Directive,@angular/core/Directive,ElementRef,@angular/core/ElementRef,Injector,@angular/core/Injector,forwardRef,@angular/core/forwardRef"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/app.component.js",
            "line": 11
          },
          {
            "location": "testapp/ng2/app/app.module.js",
            "line": 11
          },
          {
            "location": "testapp/ng2/app/async/async.component.js",
            "line": 11
          },
          {
            "location": "testapp/ng2/app/home/home.component.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.js",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 9
          },
          {
            "location": "testapp/upgrade/app/module.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/ng1.js",
            "line": 33
          },
          {
            "location": "testapp/upgrade/app/ng2.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.js",
            "line": 13
          },
          {
            "location": "testapp/ng2/app/app.component.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/app.component.ts",
            "line": 3
          },
          {
            "location": "testapp/ng2/app/app.module.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/app.module.ts",
            "line": 8
          },
          {
            "location": "testapp/ng2/app/async/async.component.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/async/async.component.ts",
            "line": 3
          },
          {
            "location": "testapp/ng2/app/home/home.component.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/home/home.component.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 8
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 24
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 10
          },
          {
            "location": "testapp/upgrade/app/ng1.ts",
            "line": 20
          },
          {
            "location": "testapp/upgrade/app/ng1.ts",
            "line": 22
          },
          {
            "location": "testapp/upgrade/app/ng2.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/ng2.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 7
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 9
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "http",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0610b79f6da9a4fc8c782cb8de2a0b20dece6921"
        }
      ],
      "purl": "pkg:npm/%40angular/http@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/http/-/http-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/http@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/http/-/http-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "http"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/driverProviderAttachSession.js",
            "line": 5
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "platform-browser",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e62a118ca08a74cbcff75fa6ff500e13f464e6b"
        }
      ],
      "purl": "pkg:npm/%40angular/platform-browser@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/platform-browser@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/platform-browser,BrowserModule,@angular/platform-browser/BrowserModule,@angular/platform-browser/animations,BrowserAnimationsModule,@angular/platform-browser/animations/BrowserAnimationsModule"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/app.module.js",
            "line": 12
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 12
          },
          {
            "location": "testapp/upgrade/app/module.js",
            "line": 12
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.js",
            "line": 12
          },
          {
            "location": "testapp/ng2/app/app.module.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.js",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 14
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "animations",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3510375f5b5e04f3e7a94d972ae6690e177780c8"
        }
      ],
      "purl": "pkg:npm/%40angular/animations@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/animations/-/animations-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/animations@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/animations/-/animations-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/animations/browser,@angular/animations"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 13
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 15
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "platform-browser-dynamic",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "412b3147db3771b2f6cb48d382f762d6e98186e2"
        }
      ],
      "purl": "pkg:npm/%40angular/platform-browser-dynamic@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/platform-browser-dynamic@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/platform-browser-dynamic,platformBrowserDynamic,@angular/platform-browser-dynamic/platformBrowserDynamic"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/main.js",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/main.js",
            "line": 2
          },
          {
            "location": "testapp/ng2/app/main.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/main.ts",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 6
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "router",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0720075aef093082d9b30c36efe1d71e8cacc9e0"
        }
      ],
      "purl": "pkg:npm/%40angular/router@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/router/-/router-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/router@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/router/-/router-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/router,Routes,@angular/router/Routes,RouterModule,@angular/router/RouterModule"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/app.routes.js",
            "line": 2
          },
          {
            "location": "testapp/ng2/app/app.routes.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/app.routes.ts",
            "line": 10
          },
          {
            "location": "testapp/ng2/app/app.component.html",
            "line": 4
          },
          {
            "location": "testapp/ng2/app/app.component.html",
            "line": 5
          },
          {
            "location": "testapp/ng2/app/app.component.html",
            "line": 7
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "upgrade",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab1a701eb26088f82e7f83d7e9cbaa97f8e6d60f"
        }
      ],
      "purl": "pkg:npm/%40angular/upgrade@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/upgrade/-/upgrade-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/upgrade@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/upgrade/-/upgrade-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/upgrade/static,downgradeModule,@angular/upgrade/static/downgradeModule,downgradeComponent,@angular/upgrade/static/downgradeComponent,UpgradeModule,@angular/upgrade/static/UpgradeModule,UpgradeComponent,@angular/upgrade/static/UpgradeComponent,@angular/upgrade,UpgradeAdapter,@angular/upgrade/UpgradeAdapter"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/upgrade/app/downgrade/main.js",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.js",
            "line": 5
          },
          {
            "location": "testapp/upgrade/app/main.js",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/module.js",
            "line": 13
          },
          {
            "location": "testapp/upgrade/app/ng1.js",
            "line": 34
          },
          {
            "location": "testapp/upgrade/app/downgrade/main.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/downgrade/main.ts",
            "line": 10
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 46
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 29
          },
          {
            "location": "testapp/upgrade/app/ng1.ts",
            "line": 21
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@types",
      "name": "angular",
      "version": "1.6.39",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d18f6e9fa00c186e33b09c64a921a634e7e8d1c597af1d6c33712ad022c2608795eba2c6eee1f5fdf7ea1b247e181454bcf84918470b12a5fdafa5575d48d57"
        }
      ],
      "purl": "pkg:npm/%40types/angular@1.6.39",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/angular/-/angular-1.6.39.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/angular@1.6.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/angular/-/angular-1.6.39.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/angular"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "core-js",
      "version": "0.9.43",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "635d5d92d049e58c0a5d7f037c749bf55eac8572921cde4fd9444f64b1d34635f73ac3bfbbcbb59199d226fb2e487ef869383c7f964a72911e09d20939c0641e"
        }
      ],
      "purl": "pkg:npm/%40types/core-js@0.9.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/core-js/-/core-js-0.9.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/core-js@0.9.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/core-js/-/core-js-0.9.43.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/core-js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "6.0.93",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "450a2be3a90283b6c5970c2b5c986877009338a9835ba9c2ac5d11498a8ca4f9a0d336284d6de08248657315c5cb50ff63c824b85c211081669ba76464fc352b"
        }
      ],
      "purl": "pkg:npm/%40types/node@6.0.93",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-6.0.93.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@6.0.93",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-6.0.93.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4de911e667b0eae9124e34254b53aea6fc618d3e"
        }
      ],
      "purl": "pkg:npm/core-js@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reflect-metadata",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64f8a41974e4f5a5aa9978dac54cfd442dc2f1d5"
        }
      ],
      "purl": "pkg:npm/reflect-metadata@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reflect-metadata@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs",
      "version": "5.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d2362fb2f8ff6cb3e119b95d0670822a3d42b4ec311a31152d2c9bdd72f33216373d762cee0e37ab7be03857b26b2c69e6f6209cfa76a057fe1074c4e4a82e0"
        }
      ],
      "purl": "pkg:npm/rxjs@5.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rxjs/-/rxjs-5.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rxjs@5.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rxjs/-/rxjs-5.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "symbol-observable",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "750a2277db6a43eba8b4686e4ca118d755f8c61c9878f567a864a84a6dce18a87613c2d9e913d42e9d6e5d372d937dc8784465ad1258a15481825b0bd3917953"
        }
      ],
      "purl": "pkg:npm/symbol-observable@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/symbol-observable/-/symbol-observable-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol-observable@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/symbol-observable/-/symbol-observable-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "systemjs",
      "version": "0.19.27",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f1740d565ce64371ac0de7072a4d1e5471ba7ba2"
        }
      ],
      "purl": "pkg:npm/systemjs@0.19.27",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/systemjs/-/systemjs-0.19.27.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/systemjs@0.19.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/systemjs/-/systemjs-0.19.27.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "when",
      "version": "3.7.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c7130b6a7ea04693e842cdc9e7a1f2aa39a39f82"
        }
      ],
      "purl": "pkg:npm/when@3.7.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/when/-/when-3.7.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/when@3.7.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/when/-/when-3.7.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zone.js",
      "version": "0.8.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92728e050334a1e6b7ff1f697720ee0e2ed18710e526138891e8b15d28932962e0b382e92b7ee205cfb51da1f0ce57221d4293d7bd82ca62452a8f17821fb8e1"
        }
      ],
      "purl": "pkg:npm/zone.js@0.8.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zone.js/-/zone.js-0.8.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zone.js@0.8.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zone.js/-/zone.js-0.8.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concurrently",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bad248e0bb129fb1621768903a6311d45d56895a"
        }
      ],
      "purl": "pkg:npm/concurrently@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concurrently/-/concurrently-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concurrently@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concurrently/-/concurrently-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "2.9.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1fc3a6b1685267dc121b5ec89b32ce069d81ab7d"
        }
      ],
      "purl": "pkg:npm/bluebird@2.9.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@2.9.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "0.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "663b3a648b68b55d04690d49167aa837858f2174"
        }
      ],
      "purl": "pkg:npm/chalk@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaecbf66cd706882760b2f4691582b8f55d7a7de"
        }
      ],
      "purl": "pkg:npm/ansi-styles@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84f265aae8c0e6a88a12d7022894b7568894c62e"
        }
      ],
      "purl": "pkg:npm/has-ansi@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d8e946967a3d8143f93e24e298525fc1b2235f9"
        }
      ],
      "purl": "pkg:npm/ansi-regex@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25f48ea22ca79187f3174a4db8759347bb126220"
        }
      ],
      "purl": "pkg:npm/strip-ansi@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d92de2694eb3f67323973d7ae3d8b55b4c22190a"
        }
      ],
      "purl": "pkg:npm/supports-color@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9df7e52fb2a0cb0fb89058ee80c3104225f37e1d"
        }
      ],
      "purl": "pkg:npm/commander@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd67f96c07efb6303b7fe94c1e979f88478e0a39"
        }
      ],
      "purl": "pkg:npm/cross-spawn@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "moment",
      "version": "2.19.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d711530249d22df738ec32311c351b9c9582f94c205b10139b299ac483d0a66321ecb066ed96f0544b2ebac86ac0bd866195348e27b8c4ef932b8e2124f8cd49"
        }
      ],
      "purl": "pkg:npm/moment@2.19.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/moment/-/moment-2.19.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/moment@2.19.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/moment/-/moment-2.19.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "2.3.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14f950a4217d7e35daa71bbcbe58eff68ea4b2b7"
        }
      ],
      "purl": "pkg:npm/rx@2.3.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-2.3.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@2.3.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-2.3.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.13.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddb2f1fb4502bf33598d2b032b037960ca6c80a3"
        }
      ],
      "purl": "pkg:npm/express@4.13.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.13.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.13.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.13.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4284fe6ae0630874639e44e80a418c2934135e9e"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2169cf7538e1b0cc87fb88e1502d8474bbf79864"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d40a82f801fc355567d2ecb65efe3f077f121c5"
        }
      ],
      "purl": "pkg:npm/proxy-addr@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fa78cf301b825c78abc3042d812723049ea23c7"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "518f921aeb0560aec7dcab2990b14cf6f3cce5de"
        }
      ],
      "purl": "pkg:npm/send@0.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b433b4724e71fd8551d9885174851c5fc377e2c9"
        }
      ],
      "purl": "pkg:npm/destroy@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lite-server",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4194ed1a9fa3210c6ab15882e1413a31a572689"
        }
      ],
      "purl": "pkg:npm/lite-server@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lite-server/-/lite-server-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lite-server@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lite-server/-/lite-server-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-sync",
      "version": "2.18.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa176b9a0b21546c307a8813fdb74e2a4643c55c6a885e3ef6689b683780c6f0c17a852d760001939c7b610d4a09c2d172101fbfc015b69f4db884e5e424cdaa"
        }
      ],
      "purl": "pkg:npm/browser-sync@2.18.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-sync/-/browser-sync-2.18.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-sync@2.18.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-sync/-/browser-sync-2.18.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-sync-client",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec1ad69a49c2e2d4b645b18b1c06c29b3d9af8eb"
        }
      ],
      "purl": "pkg:npm/browser-sync-client@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-sync-client/-/browser-sync-client-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-sync-client@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-sync-client/-/browser-sync-client-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-sync-ui",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "640a537c180689303d5be92bc476b9ebc441c0bc"
        }
      ],
      "purl": "pkg:npm/browser-sync-ui@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-sync-ui/-/browser-sync-ui-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-sync-ui@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-sync-ui/-/browser-sync-ui-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each-series",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7617c1917401fd8ca4a28aadce3dbae98afeb432"
        }
      ],
      "purl": "pkg:npm/async-each-series@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each-series/-/async-each-series-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each-series@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each-series/-/async-each-series-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-history-api-fallback",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b06873934bc5e344fef611a196a6faae0aee015a"
        }
      ],
      "purl": "pkg:npm/connect-history-api-fallback@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.5.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-history-api-fallback@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "immutable",
      "version": "3.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "200807f11ab0f72710ea485542de088075f68cd2"
        }
      ],
      "purl": "pkg:npm/immutable@3.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/immutable/-/immutable-3.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immutable@3.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/immutable/-/immutable-3.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "server-destroy",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f13bf928e42b9c3e79383e61cc3998b5d14e6cdd"
        }
      ],
      "purl": "pkg:npm/server-destroy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/server-destroy/-/server-destroy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/server-destroy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/server-destroy/-/server-destroy-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-throttle",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "add57c8d7cc73a81630d31cd55d3961cfafba9c3"
        }
      ],
      "purl": "pkg:npm/stream-throttle@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-throttle/-/stream-throttle-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-throttle@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-throttle/-/stream-throttle-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "limiter",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "248299d316fa7d96586b775e6740605c2817e87815f0dc7798519e147985596f056f6734f1ed02c84f86de76a5a43d311af1acb2319bd54745afe3e9af16446f"
        }
      ],
      "purl": "pkg:npm/limiter@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/limiter/-/limiter-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/limiter@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/limiter/-/limiter-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "weinre",
      "version": "2.0.0-pre-I0Z7U9OV",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fef8aa223921f7b40bbbbd4c3ed4302f6fd0a813"
        }
      ],
      "purl": "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/weinre/-/weinre-2.0.0-pre-I0Z7U9OV.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/weinre/-/weinre-2.0.0-pre-I0Z7U9OV.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "2.5.11",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ce8ea1f3635e69e49f0ebb497b6a4b0a51ce6f0"
        }
      ],
      "purl": "pkg:npm/express@2.5.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-2.5.11.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@2.5.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-2.5.11.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "connect",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42880a22e9438ae59a8add74e437f58ae8e52807"
        }
      ],
      "purl": "pkg:npm/connect@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-1.9.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-1.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "formidable",
      "version": "1.0.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef5491490f9433b705faa77249c99029ae348559"
        }
      ],
      "purl": "pkg:npm/formidable@1.0.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/formidable/-/formidable-1.0.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/formidable@1.0.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/formidable/-/formidable-1.0.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11b5fdaf29c2509255176b80ad520294f5de92b7"
        }
      ],
      "purl": "pkg:npm/mime@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3cac4c861e371a8c9c4770ac23cda8de639b8e5f"
        }
      ],
      "purl": "pkg:npm/qs@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6465dbf08abcd4db359317f79ac68a646b28ff9"
        }
      ],
      "purl": "pkg:npm/nopt@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1"
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6bbaf0877500d36be34ecaa584e0db9fef035209"
        }
      ],
      "purl": "pkg:npm/underscore@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bs-recipes",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d2d4d48a718c8c044769fdc4f89592dc8b69585"
        }
      ],
      "purl": "pkg:npm/bs-recipes@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bs-recipes/-/bs-recipes-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bs-recipes@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bs-recipes/-/bs-recipes-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5fee7b3b96240d38844068b0f22ef061cda7420c1e21e92a91ea48f10df2e30565bab801b764aec314de61460c6481a92d91f7aff4ec32373308c5c4e593aded"
        }
      ],
      "purl": "pkg:npm/fsevents@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c0749bfb7c12e1582fbf065b343b36be9af4da350b4ffb547286186f0fde69814273e97339233826c4e908b49f6d9280a2a65bc09d7235b4d9a6503fde49cc8"
        }
      ],
      "purl": "pkg:npm/nan@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.9.1",
      "scope": "optional",
      "purl": "pkg:npm/node-pre-gyp@0.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "1.0.3",
      "scope": "optional",
      "purl": "pkg:npm/detect-libc@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "needle",
      "version": "2.2.0",
      "scope": "optional",
      "purl": "pkg:npm/needle@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/needle@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.21",
      "scope": "optional",
      "purl": "pkg:npm/iconv-lite@0.4.21",
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "purl": "pkg:npm/sax@1.2.4",
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "nopt",
      "version": "4.0.1",
      "scope": "optional",
      "purl": "pkg:npm/nopt@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/nopt@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osenv",
      "version": "0.1.5",
      "scope": "optional",
      "purl": "pkg:npm/osenv@0.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/osenv@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-packlist",
      "version": "1.1.10",
      "scope": "optional",
      "purl": "pkg:npm/npm-packlist@1.1.10",
      "type": "library",
      "bom-ref": "pkg:npm/npm-packlist@1.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore-walk",
      "version": "3.0.1",
      "scope": "optional",
      "purl": "pkg:npm/ignore-walk@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ignore-walk@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-bundled",
      "version": "1.0.3",
      "scope": "optional",
      "purl": "pkg:npm/npm-bundled@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/npm-bundled@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "4.1.2",
      "scope": "optional",
      "purl": "pkg:npm/npmlog@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-we-there-yet",
      "version": "1.1.4",
      "scope": "optional",
      "purl": "pkg:npm/are-we-there-yet@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delegates",
      "version": "1.0.0",
      "scope": "optional",
      "purl": "pkg:npm/delegates@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delegates@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.6",
      "scope": "optional",
      "purl": "pkg:npm/readable-stream@2.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.0",
      "scope": "optional",
      "purl": "pkg:npm/process-nextick-args@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-control-strings",
      "version": "1.1.0",
      "scope": "optional",
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/console-control-strings@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gauge",
      "version": "2.7.4",
      "scope": "optional",
      "purl": "pkg:npm/gauge@2.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/gauge@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aproba",
      "version": "1.2.0",
      "scope": "optional",
      "purl": "pkg:npm/aproba@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/aproba@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-unicode",
      "version": "2.0.1",
      "scope": "optional",
      "purl": "pkg:npm/has-unicode@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/has-unicode@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.2",
      "scope": "optional",
      "purl": "pkg:npm/wide-align@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.6",
      "scope": "optional",
      "purl": "pkg:npm/rc@1.2.6",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar",
      "version": "4.4.1",
      "scope": "optional",
      "purl": "pkg:npm/tar@4.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/tar@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chownr",
      "version": "1.0.1",
      "scope": "optional",
      "purl": "pkg:npm/chownr@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/chownr@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-minipass",
      "version": "1.2.5",
      "scope": "optional",
      "purl": "pkg:npm/fs-minipass@1.2.5",
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "2.2.4",
      "scope": "optional",
      "purl": "pkg:npm/minipass@2.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/minipass@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "3.0.2",
      "scope": "optional",
      "purl": "pkg:npm/yallist@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/yallist@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minizlib",
      "version": "1.1.0",
      "scope": "optional",
      "purl": "pkg:npm/minizlib@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/minizlib@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b357525a0b4c1f50599cd983e1d9efeea9677198"
        }
      ],
      "purl": "pkg:npm/connect@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-3.5.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e9508abece9b6dba871a6942a1d7911b91911ac7"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dev-ip",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a76a3ed1855be7a012bb8ac16cb80f3c00dc28f0"
        }
      ],
      "purl": "pkg:npm/dev-ip@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dev-ip/-/dev-ip-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dev-ip@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dev-ip/-/dev-ip-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "easy-extender",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d3248febe2b159607316d8f9cf491c16648221d"
        }
      ],
      "purl": "pkg:npm/easy-extender@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/easy-extender/-/easy-extender-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/easy-extender@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/easy-extender/-/easy-extender-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eazy-logger",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a325aa5e53d13a2225889b2ac4113b2b9636f4fc"
        }
      ],
      "purl": "pkg:npm/eazy-logger@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eazy-logger/-/eazy-logger-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eazy-logger@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eazy-logger/-/eazy-logger-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tfunk",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "38e4414fc64977d87afdaa72facb6d29f82f7b5b"
        }
      ],
      "purl": "pkg:npm/tfunk@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tfunk/-/tfunk-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tfunk@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tfunk/-/tfunk-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-path",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0fd9a74fc5fad1ae3968b586bda5c632bd6c05a5"
        }
      ],
      "purl": "pkg:npm/object-path@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-path/-/object-path-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-path@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-path/-/object-path-0.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emitter-steward",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3411ade9758a7565df848b2da0cbbd1b46cbd64"
        }
      ],
      "purl": "pkg:npm/emitter-steward@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emitter-steward/-/emitter-steward-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emitter-steward@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emitter-steward/-/emitter-steward-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3794f378c58b342ea7dbbb23095109c4b3b62291"
        }
      ],
      "purl": "pkg:npm/fs-extra@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5ecc6f65f53f662c4415c7675a0331d0992ec66"
        }
      ],
      "purl": "pkg:npm/jsonfile@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa71badd4437af4c148841e3b3b165f9e9e590b7"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "1.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "642fdcaffe52d3448d2bda3b0079e9409064da31"
        }
      ],
      "purl": "pkg:npm/http-proxy@1.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.15.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c86991d816ad1e504750e73874224ecf3bec508"
        }
      ],
      "purl": "pkg:npm/eventemitter3@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "925d2601d39ac485e091cf0da5c6e694dc3dcaff"
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "localtunnel",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcc5922fd85651037d4bde24fd93248d0b24eb05"
        }
      ],
      "purl": "pkg:npm/localtunnel@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/localtunnel/-/localtunnel-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/localtunnel@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/localtunnel/-/localtunnel-1.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e731531ca2ede27d188222427da17821d68ff4fc"
        }
      ],
      "purl": "pkg:npm/debug@2.6.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "openurl",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3875b4b0ef7a52c156f0db41d4609dbb0f94b387"
        }
      ],
      "purl": "pkg:npm/openurl@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/openurl/-/openurl-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/openurl@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/openurl/-/openurl-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.81.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6928946a0e06c5f8d6f8a9333469ffda46298a0"
        }
      ],
      "purl": "pkg:npm/request@2.81.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.81.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83ef5ca860b2b32e4a0deedee8c771b9db57471e"
        }
      ],
      "purl": "pkg:npm/aws4@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "938370a57b4a51dea2c77c15d5c5fdf895164009"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33c183acf193276ecaa98143a69e94bfee1750d1"
        }
      ],
      "purl": "pkg:npm/form-data@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33481d0f1bbff600dd203d75812a6a5fba002e2a"
        }
      ],
      "purl": "pkg:npm/har-validator@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "4.11.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82ffb02b29e662ae53bdc20af15947706739c536"
        }
      ],
      "purl": "pkg:npm/ajv@4.11.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@4.11.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af"
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73"
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d263135f43307c02c602afc8fe95970c0151369e"
        }
      ],
      "purl": "pkg:npm/har-schema@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4"
        }
      ],
      "purl": "pkg:npm/hawk@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "2.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "39c8918ceff5799f83f9492a848f625add0c766f"
        }
      ],
      "purl": "pkg:npm/boom@2.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@2.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "2.16.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@2.16.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
        }
      ],
      "purl": "pkg:npm/cryptiles@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6541184cc90aeea6c6e7b35e2659082443c66198"
        }
      ],
      "purl": "pkg:npm/sntp@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
        }
      ],
      "purl": "pkg:npm/http-signature@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "512df6da6287144316dc4c18fe1cf1d940739be3"
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dac8787713c9966849fc8180777ebe9c1ddf3b86"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63bc5dcb61331b92bc05fd528953c33462a06f8d"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0fc73a9ed5f0d53c38193398523ef7e543777505"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33ef30c5c77d4ea21c5a53869d91b56d8f2555e5"
        }
      ],
      "purl": "pkg:npm/performance-now@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "13e26d28ad6b0ffaa91312cd3bf708ed351e7233"
        }
      ],
      "purl": "pkg:npm/qs@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c85adcd4930d383389376dfd487294b6b6781710bdba6140f6334b4c0d4a6752bcf6860cd40650f9e5ae058dd2c63ef7c7c52eae96e196bda544aa005c55afa"
        }
      ],
      "purl": "pkg:npm/uuid@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.29.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1aab9660eae79d8b8f675bcaeeab6ee34c2cf69c"
        }
      ],
      "purl": "pkg:npm/yargs@3.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.29.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/cli.js",
            "line": 5
          },
          {
            "location": "testapp/scripts/web-server.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "120601537a916d29940f934da3b48d585a39213d"
        }
      ],
      "purl": "pkg:npm/cliui@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
        }
      ],
      "purl": "pkg:npm/os-locale@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
        }
      ],
      "purl": "pkg:npm/lcid@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
        }
      ],
      "purl": "pkg:npm/invert-kv@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8e1aa1ee5a53ec5bf151ffa09742a6ad7697876"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
        }
      ],
      "purl": "pkg:npm/y18n@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7abc22e644dff63b0a96d5ab7f2790c0f01abc95"
        }
      ],
      "purl": "pkg:npm/opn@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/opn/-/opn-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/opn@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/opn/-/opn-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "portscanner",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eabb409e4de24950f5a2a516d35ae769343fbb96"
        }
      ],
      "purl": "pkg:npm/portscanner@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/portscanner/-/portscanner-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/portscanner@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/portscanner/-/portscanner-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number-like",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eab662ddecc2c85727e4bef5cb0cf3d9b4b96f6220975127dde4e5665bca8e9cf59f72192c060c6ca600210805984bb4184360f76ce253f7da10e03f6a2c636c"
        }
      ],
      "purl": "pkg:npm/is-number-like@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number-like/-/is-number-like-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number-like@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number-like/-/is-number-like-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isfinite",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb89b65a9a80281833f0b7478b3a5104f898ebb3"
        }
      ],
      "purl": "pkg:npm/lodash.isfinite@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isfinite/-/lodash.isfinite-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isfinite@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isfinite/-/lodash.isfinite-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce03c5ff0935bc1d9d69a9f14cbd18e568d67625"
        }
      ],
      "purl": "pkg:npm/qs@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resp-modifier",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b124de5c4fbafcba541f48ffa73970f4aa456b4f"
        }
      ],
      "purl": "pkg:npm/resp-modifier@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resp-modifier/-/resp-modifier-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resp-modifier@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resp-modifier/-/resp-modifier-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5f13ff79ef3b740fe30aa803fb09f98805d4782"
        }
      ],
      "purl": "pkg:npm/rx@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c5d96c13fb131101f93c1c5774f8516a1e78d3b"
        }
      ],
      "purl": "pkg:npm/serve-index@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e546e2726081b81b4bcec8e90808ebcdd323afba"
        }
      ],
      "purl": "pkg:npm/serve-static@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f91fab4403bcf87e716f70ceb5db2f578bdc17d6"
        }
      ],
      "purl": "pkg:npm/send@0.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.15.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7586a9b3c39741c0282ae33445c4e8ac74734fe0"
        }
      ],
      "purl": "pkg:npm/debug@2.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "708155a5e44e33f5fd0fc53e81d0d40a91be1fff"
        }
      ],
      "purl": "pkg:npm/ms@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ae2eeb65efa62268aebfea83ac7d79299b0887"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f474ca5e6a9246d6fd8e0953cfa9b9c805afa78e"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a002cc85707192a7e7946ceedc11155f60ec736"
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66567e37043eeb4f04d91bd658c0cbefb55b8e04"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59adcd22edc543f7b5381862d31387b1f4bc9473"
        }
      ],
      "purl": "pkg:npm/ms@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e40d932637e6bd923981b25caf7c53e83b6e2e1"
        }
      ],
      "purl": "pkg:npm/socket.io@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40c453e67e6e13c901ddec317af8986cda9eff8c"
        }
      ],
      "purl": "pkg:npm/debug@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3eeb5f264cb75dbbec1baaea26d61f5a4eace2aa"
        }
      ],
      "purl": "pkg:npm/engine.io@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io/-/engine.io-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io/-/engine.io-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3ca7434938648c3e0d9c1e328dd68b622c284ca"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-parser",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9554f1ae33107d6fbd170ca5466d2f833f6a07cf"
        }
      ],
      "purl": "pkg:npm/engine.io-parser@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-parser@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "after",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab5d4fb883f596816d3515f8f791c0af486dd627"
        }
      ],
      "purl": "pkg:npm/after@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/after/-/after-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/after@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/after/-/after-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arraybuffer.slice",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f33b2159f0532a3f3107a272c0ccfbd1ad2979ca"
        }
      ],
      "purl": "pkg:npm/arraybuffer.slice@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arraybuffer.slice@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-arraybuffer",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73926771923b5a19747ad666aa5cd4bf9c6e9ce8"
        }
      ],
      "purl": "pkg:npm/base64-arraybuffer@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-arraybuffer@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "blob",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcf13052ca54463f30f9fc7e95b9a47630a94921"
        }
      ],
      "purl": "pkg:npm/blob@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/blob/-/blob-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blob@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/blob/-/blob-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25326f39cfa4f616ad8787894e3af2cfbc7b6e10"
        }
      ],
      "purl": "pkg:npm/has-binary@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wtf-8",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "392d8ba2d0f1c34d1ee2d630f15d0efb68e1048a"
        }
      ],
      "purl": "pkg:npm/wtf-8@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wtf-8/-/wtf-8-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wtf-8@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wtf-8/-/wtf-8-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "082ddb6c641e85d4bb451f03d52f06eabdb1f018"
        }
      ],
      "purl": "pkg:npm/ws@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ultron",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace116ab557cd197386a4e88f4685378c8b2e4fa"
        }
      ],
      "purl": "pkg:npm/ultron@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ultron/-/ultron-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ultron@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ultron/-/ultron-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68e61eb16210c9545a0a5cce06a873912fe1e68c"
        }
      ],
      "purl": "pkg:npm/has-binary@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a3b3d0e98063d43f4c03f2e8ae6cd51a86883a0"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-adapter",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb6d4bb8bec81e1078b99677f9ced0046066bb8b"
        }
      ],
      "purl": "pkg:npm/socket.io-adapter@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-adapter@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-parser",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd532025103ce429697326befd64005fcfe5b4a0"
        }
      ],
      "purl": "pkg:npm/socket.io-parser@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-parser@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "296594f2753daa63996d2af08d15a95116c9aec3"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        }
      ],
      "purl": "pkg:npm/json3@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-client",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b668f4f771304dfeed179064708386fa6717853"
        }
      ],
      "purl": "pkg:npm/socket.io-client@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-client@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "backo2",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ab1ac8b129363463e35b3ebb69f4dfcfba7947"
        }
      ],
      "purl": "pkg:npm/backo2@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/backo2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-bind",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00c608ab7dcd93897c0009651b1d3a8e1e73bbd1"
        }
      ],
      "purl": "pkg:npm/component-bind@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-bind@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-client",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b730e4127414087596d9be3c88d2bc5fdb6cf5c"
        }
      ],
      "purl": "pkg:npm/engine.io-client@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-client@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-inherit",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "645fc4adf58b72b649d5cae65135619db26ff143"
        }
      ],
      "purl": "pkg:npm/component-inherit@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-inherit@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-cors",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e474793f7ea9843d1bb99c23eef49ff126fff39"
        }
      ],
      "purl": "pkg:npm/has-cors@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-cors/-/has-cors-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-cors@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-cors/-/has-cors-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82dc336d232b9062179d05ab3293a66059fd435d"
        }
      ],
      "purl": "pkg:npm/indexof@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parsejson",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab7e3759f209ece99437973f7d0f1f64ae0e64ab"
        }
      ],
      "purl": "pkg:npm/parsejson@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parsejson/-/parsejson-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parsejson@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parsejson/-/parsejson-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "better-assert",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40866b9e1b9e0b55b481894311e68faffaebc522"
        }
      ],
      "purl": "pkg:npm/better-assert@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/better-assert@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsite",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "280398e5d664bd74038b6f0905153e6e8af1bc20"
        }
      ],
      "purl": "pkg:npm/callsite@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsite@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseqs",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5208a3738e46766e291ba2ea173684921a8b89d"
        }
      ],
      "purl": "pkg:npm/parseqs@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseqs@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseuri",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80204a50d4dbb779bfdc6ebe2778d90e4bce320a"
        }
      ],
      "purl": "pkg:npm/parseuri@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseuri@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlhttprequest-ssl",
      "version": "1.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "185a888c04eca46c3e4070d99f7b49de3528992d"
        }
      ],
      "purl": "pkg:npm/xmlhttprequest-ssl@1.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlhttprequest-ssl@1.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "yeast",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "008e06d8094320c372dbc2f8ed76a0ca6c8ac419"
        }
      ],
      "purl": "pkg:npm/yeast@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeast/-/yeast-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeast@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeast/-/yeast-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-component",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0c69aa50efc95b866c186f400a33769cb2f1291"
        }
      ],
      "purl": "pkg:npm/object-component@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-component@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-array",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "17e6c11f73dd4f3d74cda7a4ff3238e9ad9bf890"
        }
      ],
      "purl": "pkg:npm/to-array@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-array/-/to-array-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-array@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-array/-/to-array-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ua-parser-js",
      "version": "0.7.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04c81a99bdd5dc52263ea29d24c6bf8d4818a4bb"
        }
      ],
      "purl": "pkg:npm/ua-parser-js@0.7.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ua-parser-js@0.7.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "6.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "816e1a866d5598ccf34e5596ddce22d92da490d4"
        }
      ],
      "purl": "pkg:npm/yargs@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-6.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/cli.js",
            "line": 5
          },
          {
            "location": "testapp/scripts/web-server.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
        }
      ],
      "purl": "pkg:npm/camelcase@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f702e63127e7e231c160a80c1554acb70d5047e5"
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f855a86ce61adc4e8621c3cda21e7a7612c3a8dc"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f638d415b4cf7c4cb747f69dff6a0d6cab56f47828be5e4ed45bc558a90a6e5357a0dfcea2eebef7e28aa213cad7761cdff4f2ba7c96849a7a82f44d47f3cf03"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4d81b5114ae69bf7429b4eabd13ecb1e693c4e2426410f46bbb7e85a48ddf7a623fd7023389740aa7730227f6854aa6ef5e94a2f281d913a689a6c600a557ca"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-builtin-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
        }
      ],
      "purl": "pkg:npm/is-builtin-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-builtin-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59f1bf5fdfa801387cd57b65948a3f23c80e898f445d176fd5c41dcb291e5cad7b61c516dc45d4022d93a38a5c1fa9d9b493ebed93a933938cc962599bef11b2"
        }
      ],
      "purl": "pkg:npm/semver@5.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.4.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
        }
      ],
      "purl": "pkg:npm/spdx-correct@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9df7a3424594ade6bd11900d596696dc06bac57"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bdf2f20e1f40ed447fbe273266191fced51626c"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bba63ca861948994ff307736089e3b96026c2a4f"
        }
      ],
      "purl": "pkg:npm/which-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b4315bb4214a3d7058ebeee892e13fa24d98b075"
        }
      ],
      "purl": "pkg:npm/window-size@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29cceac0dc4f03c6c87b4a9f217dd18c9f74871c"
        }
      ],
      "purl": "pkg:npm/yargs-parser@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "connect-logger",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d999978a1d20bb4608e7cd434d741652255174b"
        }
      ],
      "purl": "pkg:npm/connect-logger@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-logger/-/connect-logger-0.0.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-logger@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-logger/-/connect-logger-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@types/q@0.0.32",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/selenium-webdriver@3.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blocking-proxy@1.0.1",
      "dependsOn": [
        "pkg:npm/minimist@1.2.5"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@4.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es6-promisify@5.0.0",
      "dependsOn": [
        "pkg:npm/es6-promise@4.2.4"
      ]
    },
    {
      "ref": "pkg:npm/agent-base@4.2.0",
      "dependsOn": [
        "pkg:npm/es6-promisify@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@3.1.0",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/https-proxy-agent@2.2.1",
      "dependsOn": [
        "pkg:npm/agent-base@4.2.0",
        "pkg:npm/debug@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/browserstack@1.5.1",
      "dependsOn": [
        "pkg:npm/https-proxy-agent@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@2.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.1.3",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.8",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11",
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.2",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/exit@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine-core@2.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine@2.8.0",
      "dependsOn": [
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/jasmine-core@2.8.0"
      ]
    },
    {
      "ref": "pkg:npm/jasminewd2@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/saucelabs@1.5.0",
      "dependsOn": [
        "pkg:npm/https-proxy-agent@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/immediate@3.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lie@3.3.0",
      "dependsOn": [
        "pkg:npm/immediate@3.0.6"
      ]
    },
    {
      "ref": "pkg:npm/pako@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.8",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/setimmediate@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jszip@3.10.2",
      "dependsOn": [
        "pkg:npm/lie@3.3.0",
        "pkg:npm/pako@1.0.11",
        "pkg:npm/readable-stream@2.3.8",
        "pkg:npm/setimmediate@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.5.4",
      "dependsOn": [
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/os-tmpdir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.30-tuxcare.2",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@11.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.4.23-tuxcare.3",
      "dependsOn": [
        "pkg:npm/sax@1.6.1",
        "pkg:npm/xmlbuilder@11.0.1"
      ]
    },
    {
      "ref": "pkg:npm/selenium-webdriver@3.6.0-tuxcare.1",
      "dependsOn": [
        "pkg:npm/jszip@3.10.2",
        "pkg:npm/rimraf@2.5.4",
        "pkg:npm/tmp@0.0.30-tuxcare.2",
        "pkg:npm/xml2js@0.4.23-tuxcare.3"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.4.18",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/webdriver-js-extender@2.1.0-tuxcare.1",
      "dependsOn": [
        "pkg:npm/@types/selenium-webdriver@3.0.10",
        "pkg:npm/selenium-webdriver@3.6.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:npm/adm-zip@0.5.18-tuxcare.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@1.0.2",
      "dependsOn": [
        "pkg:npm/array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/arrify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/globby@5.0.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-path-cwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-inside@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@1.0.1",
      "dependsOn": [
        "pkg:npm/path-is-inside@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-path-in-cwd@1.0.1",
      "dependsOn": [
        "pkg:npm/is-path-inside@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/del@2.2.2",
      "dependsOn": [
        "pkg:npm/globby@5.0.0",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/rimraf@2.5.4"
      ]
    },
    {
      "ref": "pkg:npm/ini@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.8-tuxcare.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.30.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.17",
      "dependsOn": [
        "pkg:npm/mime-db@1.30.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.3.3-tuxcare.5",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.15.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.5",
      "dependsOn": [
        "pkg:npm/ajv@6.15.0",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.2",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.4.0",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asn1@0.2.6",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.18.0",
      "dependsOn": [
        "pkg:npm/asn1@0.2.6",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.2",
        "pkg:npm/sshpk@1.18.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.5-tuxcare.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.15.0",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
      "dependsOn": [
        "pkg:npm/psl@1.15.0",
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.4.0-tuxcare.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.88.2-tuxcare.7",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.13.2",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3-tuxcare.5",
        "pkg:npm/har-validator@5.1.5",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.5-tuxcare.2",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.4.0-tuxcare.3"
      ]
    },
    {
      "ref": "pkg:npm/semver@5.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webdriver-manager@12.1.9-tuxcare.1",
      "dependsOn": [
        "pkg:npm/adm-zip@0.5.18-tuxcare.8",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/del@2.2.2",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.8-tuxcare.2",
        "pkg:npm/q@1.4.1",
        "pkg:npm/request@2.88.2-tuxcare.7",
        "pkg:npm/rimraf@2.5.4",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/xml2js@0.4.23-tuxcare.3"
      ]
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@2.1.1",
      "dependsOn": [
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@2.1.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cliui@4.1.0",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/strip-ansi@4.0.0",
        "pkg:npm/wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-try@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.2.2",
      "dependsOn": [
        "pkg:npm/p-try@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@3.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@3.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@3.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@3.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/get-caller-file@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nice-try@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@1.2.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.3.0",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@6.0.5",
      "dependsOn": [
        "pkg:npm/nice-try@1.0.5",
        "pkg:npm/path-key@2.0.1",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@3.0.0",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@4.1.0",
      "dependsOn": [
        "pkg:npm/pump@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@2.0.2",
      "dependsOn": [
        "pkg:npm/path-key@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/p-finally@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-eof@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@1.0.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@6.0.5",
        "pkg:npm/get-stream@4.1.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/invert-kv@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@2.0.0",
      "dependsOn": [
        "pkg:npm/invert-kv@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-defer@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-age-cleaner@0.1.3",
      "dependsOn": [
        "pkg:npm/p-defer@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-is-promise@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mem@4.3.0",
      "dependsOn": [
        "pkg:npm/map-age-cleaner@0.1.3",
        "pkg:npm/mimic-fn@2.1.0",
        "pkg:npm/p-is-promise@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@3.1.0",
      "dependsOn": [
        "pkg:npm/execa@1.0.0",
        "pkg:npm/lcid@2.0.0",
        "pkg:npm/mem@4.3.0"
      ]
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-main-filename@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-blocking@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which-module@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@11.1.1",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@12.0.5",
      "dependsOn": [
        "pkg:npm/cliui@4.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/find-up@3.0.0",
        "pkg:npm/get-caller-file@1.0.3",
        "pkg:npm/os-locale@3.1.0",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/which-module@2.0.0",
        "pkg:npm/y18n@4.0.0",
        "pkg:npm/yargs-parser@11.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/chalk@0.4.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/events@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimatch@2.0.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@6.0.96",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/glob@5.0.35",
      "dependsOn": [
        "pkg:npm/@types/events@1.1.0",
        "pkg:npm/@types/minimatch@2.0.29",
        "pkg:npm/@types/node@6.0.96"
      ]
    },
    {
      "ref": "pkg:npm/@types/jasmine@2.8.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/jasminewd2@2.0.3",
      "dependsOn": [
        "pkg:npm/@types/jasmine@2.8.5"
      ]
    },
    {
      "ref": "pkg:npm/bytes@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.2.0",
      "dependsOn": [
        "pkg:npm/ms@0.7.1"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.5.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.0.2",
        "pkg:npm/statuses@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.3.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.1.7",
      "dependsOn": [
        "pkg:npm/bytes@2.4.0",
        "pkg:npm/iconv-lite@0.4.13",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.15",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.15.2",
      "dependsOn": [
        "pkg:npm/bytes@2.4.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/http-errors@1.5.1",
        "pkg:npm/iconv-lite@0.4.13",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@6.2.0",
        "pkg:npm/raw-body@2.1.7",
        "pkg:npm/type-is@1.6.15"
      ]
    },
    {
      "ref": "pkg:npm/assertion-error@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-detect@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-eql@0.1.3",
      "dependsOn": [
        "pkg:npm/type-detect@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/type-detect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@3.5.0",
      "dependsOn": [
        "pkg:npm/assertion-error@1.0.2",
        "pkg:npm/deep-eql@0.1.3",
        "pkg:npm/type-detect@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chai-as-promised@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-parse@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.5.0",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/clang-format@1.0.49",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/expect.js@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/negotiator@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.4",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@0.5.1",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@1.1.5",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.2",
        "pkg:npm/ipaddr.js@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.14.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.5.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@0.7.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.11.2",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.14.2"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.14.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/content-disposition@0.5.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/finalhandler@0.5.1",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@1.1.5",
        "pkg:npm/qs@6.2.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/send@0.14.2",
        "pkg:npm/serve-static@1.11.2",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/archy@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deprecated@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-differ@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/beeper@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dateformat@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-wrap@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-gray@0.1.1",
      "dependsOn": [
        "pkg:npm/ansi-wrap@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/time-stamp@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fancy-log@1.3.1",
      "dependsOn": [
        "pkg:npm/ansi-gray@0.1.1",
        "pkg:npm/time-stamp@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/sparkles@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glogg@1.0.0",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gulplog@1.0.0",
      "dependsOn": [
        "pkg:npm/glogg@1.0.0",
        "pkg:npm/glogg@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-gulplog@0.1.0",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash._reescape@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basecopy@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basetostring@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basevalues@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._root@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.escape@3.2.0",
      "dependsOn": [
        "pkg:npm/lodash._root@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._getnative@3.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarguments@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarray@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.keys@3.1.2",
      "dependsOn": [
        "pkg:npm/lodash._getnative@3.9.1",
        "pkg:npm/lodash.isarguments@3.1.0",
        "pkg:npm/lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash.restparam@3.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@3.1.1",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.template@3.6.2",
      "dependsOn": [
        "pkg:npm/lodash._basecopy@3.0.1",
        "pkg:npm/lodash._basetostring@3.0.1",
        "pkg:npm/lodash._basevalues@3.0.0",
        "pkg:npm/lodash._isiterateecall@3.0.9",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.2.0",
        "pkg:npm/lodash.keys@3.1.2",
        "pkg:npm/lodash.restparam@3.6.1",
        "pkg:npm/lodash.templatesettings@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.14",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/duplexer2@0.0.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/multipipe@0.1.2",
      "dependsOn": [
        "pkg:npm/duplexer2@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/replace-ext@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.0.3",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.3",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.0.3",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xtend@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@2.0.3",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.5.3",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@1.0.3",
        "pkg:npm/replace-ext@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-util@3.0.8",
      "dependsOn": [
        "pkg:npm/array-differ@1.0.0",
        "pkg:npm/array-uniq@1.0.3",
        "pkg:npm/beeper@1.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/dateformat@2.2.0",
        "pkg:npm/fancy-log@1.3.1",
        "pkg:npm/fancy-log@1.3.2",
        "pkg:npm/gulplog@1.0.0",
        "pkg:npm/has-gulplog@0.1.0",
        "pkg:npm/lodash._reescape@3.0.0",
        "pkg:npm/lodash._reevaluate@3.0.0",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.template@3.6.2",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/minimist@1.2.5",
        "pkg:npm/multipipe@0.1.2",
        "pkg:npm/object-assign@3.0.0",
        "pkg:npm/replace-ext@0.0.1",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/interpret@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-exists-sync@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-file@0.1.0",
      "dependsOn": [
        "pkg:npm/fs-exists-sync@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/arr-flatten@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-diff@2.0.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array-unique@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/is-number@2.1.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": [
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-number@3.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@4.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/randomatic@1.1.7",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-range@2.2.3",
      "dependsOn": [
        "pkg:npm/is-number@2.1.0",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/randomatic@1.1.7",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-range@1.8.2",
      "dependsOn": [
        "pkg:npm/fill-range@2.2.3"
      ]
    },
    {
      "ref": "pkg:npm/preserve@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/braces@1.8.5",
      "dependsOn": [
        "pkg:npm/expand-range@1.8.2",
        "pkg:npm/preserve@0.2.0",
        "pkg:npm/repeat-element@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-posix-bracket@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@0.1.5",
      "dependsOn": [
        "pkg:npm/is-posix-bracket@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/extglob@0.3.2",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/filename-regex@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@2.1.1",
      "dependsOn": [
        "pkg:npm/remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/for-in@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@0.1.5",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.omit@2.0.1",
      "dependsOn": [
        "pkg:npm/for-own@0.1.5",
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@2.0.0",
      "dependsOn": [
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-base@0.3.0",
      "dependsOn": [
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-dotfile@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-glob@3.0.4",
      "dependsOn": [
        "pkg:npm/glob-base@0.3.0",
        "pkg:npm/is-dotfile@1.0.3",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-primitive@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-equal-shallow@0.1.3",
      "dependsOn": [
        "pkg:npm/is-primitive@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regex-cache@0.4.4",
      "dependsOn": [
        "pkg:npm/is-equal-shallow@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@2.3.11",
      "dependsOn": [
        "pkg:npm/arr-diff@2.0.0",
        "pkg:npm/array-unique@0.2.1",
        "pkg:npm/braces@1.8.5",
        "pkg:npm/expand-brackets@0.1.5",
        "pkg:npm/extglob@0.3.2",
        "pkg:npm/filename-regex@2.0.1",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/object.omit@2.0.1",
        "pkg:npm/parse-glob@3.0.4",
        "pkg:npm/regex-cache@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/os-homedir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-tilde@1.2.2",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-passwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/homedir-polyfill@1.0.1",
      "dependsOn": [
        "pkg:npm/parse-passwd@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global-prefix@0.1.5",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/is-windows@0.2.0",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/global-modules@0.2.3",
      "dependsOn": [
        "pkg:npm/global-prefix@0.1.5",
        "pkg:npm/is-windows@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-dir@0.1.1",
      "dependsOn": [
        "pkg:npm/expand-tilde@1.2.2",
        "pkg:npm/global-modules@0.2.3"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@0.4.3",
      "dependsOn": [
        "pkg:npm/detect-file@0.1.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/resolve-dir@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-tilde@2.0.2",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-object@2.0.4",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-slice@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@1.0.0",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.defaults@1.1.0",
      "dependsOn": [
        "pkg:npm/array-each@1.0.1",
        "pkg:npm/array-slice@1.1.0",
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object.pick@1.3.0",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/unc-path-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unc-path@0.1.2",
      "dependsOn": [
        "pkg:npm/unc-path-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-relative@0.2.1",
      "dependsOn": [
        "pkg:npm/is-unc-path@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute@0.2.6",
      "dependsOn": [
        "pkg:npm/is-relative@0.2.1",
        "pkg:npm/is-windows@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/map-cache@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-root-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-root@0.1.1",
      "dependsOn": [
        "pkg:npm/path-root-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-filepath@1.0.1",
      "dependsOn": [
        "pkg:npm/is-absolute@0.2.6",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/path-root@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/fined@1.1.0",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.defaults@1.1.0",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/parse-filepath@1.0.1",
        "pkg:npm/parse-filepath@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/flagged-respawn@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isstring@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.mapvalues@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rechoir@0.6.2",
      "dependsOn": [
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/liftoff@2.3.0",
      "dependsOn": [
        "pkg:npm/extend@3.0.1",
        "pkg:npm/findup-sync@0.4.3",
        "pkg:npm/fined@1.1.0",
        "pkg:npm/flagged-respawn@0.3.2",
        "pkg:npm/lodash.isplainobject@4.0.6",
        "pkg:npm/lodash.isstring@4.0.1",
        "pkg:npm/lodash.mapvalues@4.6.0",
        "pkg:npm/rechoir@0.6.2",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/once@1.3.3",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@0.1.5",
      "dependsOn": [
        "pkg:npm/once@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/sequencify@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-consume@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/orchestrator@0.3.8",
      "dependsOn": [
        "pkg:npm/end-of-stream@0.1.5",
        "pkg:npm/sequencify@0.0.7",
        "pkg:npm/stream-consume@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-hrtime@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tildify@1.2.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8flags@2.1.1",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/defaults@1.0.3",
      "dependsOn": [
        "pkg:npm/clone@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.10",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.5.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/find-index@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob2base@0.0.12",
      "dependsOn": [
        "pkg:npm/find-index@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ordered-read-streams@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.34",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/through2@0.6.5",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/unique-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-stream@3.1.18",
      "dependsOn": [
        "pkg:npm/glob2base@0.0.12",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/ordered-read-streams@0.1.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/unique-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.1.21",
      "dependsOn": [
        "pkg:npm/graceful-fs@1.2.3",
        "pkg:npm/inherits@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globule@0.1.0",
      "dependsOn": [
        "pkg:npm/glob@3.1.21",
        "pkg:npm/lodash@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/gaze@0.5.2",
      "dependsOn": [
        "pkg:npm/globule@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-watcher@0.0.6",
      "dependsOn": [
        "pkg:npm/gaze@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/natives@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@3.0.11",
      "dependsOn": [
        "pkg:npm/natives@1.1.1",
        "pkg:npm/natives@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@1.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@1.0.0",
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.4.6",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-fs@0.3.14",
      "dependsOn": [
        "pkg:npm/defaults@1.0.3",
        "pkg:npm/glob-stream@3.1.18",
        "pkg:npm/glob-watcher@0.0.6",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/gulp@3.9.1",
      "dependsOn": [
        "pkg:npm/archy@1.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/deprecated@0.0.1",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/interpret@1.1.0",
        "pkg:npm/liftoff@2.3.0",
        "pkg:npm/liftoff@2.5.0",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/minimist@1.2.5",
        "pkg:npm/orchestrator@0.3.8",
        "pkg:npm/pretty-hrtime@1.0.3",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/tildify@1.2.0",
        "pkg:npm/v8flags@2.1.1",
        "pkg:npm/vinyl-fs@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@3.1.1",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/es6-iterator@2.0.3",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.38",
      "dependsOn": [
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/d@1.0.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/es6-weak-map@2.0.2",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter@0.3.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/is-promise@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-queue@0.1.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/next-tick@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timers-ext@0.1.2",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/next-tick@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/memoizee@0.4.11",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/event-emitter@0.3.5",
        "pkg:npm/is-promise@2.1.0",
        "pkg:npm/lru-queue@0.1.0",
        "pkg:npm/next-tick@1.0.0",
        "pkg:npm/timers-ext@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cli-color@1.2.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/memoizee@0.4.11",
        "pkg:npm/timers-ext@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/diff@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/from@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pause-stream@0.0.11",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/split@0.3.3",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner@0.0.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/event-stream@3.3.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.3.3",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/gulp-diff@1.0.0",
      "dependsOn": [
        "pkg:npm/cli-color@1.2.0",
        "pkg:npm/diff@2.2.3",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/pkginfo@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.0.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/duplexer2@0.1.4",
      "dependsOn": [
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner2@1.1.1",
      "dependsOn": [
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/stream-equal@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gulp-clang-format@1.0.23",
      "dependsOn": [
        "pkg:npm/clang-format@1.0.49",
        "pkg:npm/gulp-diff@1.0.0",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/pkginfo@0.3.1",
        "pkg:npm/stream-combiner2@1.1.1",
        "pkg:npm/stream-equal@0.1.6",
        "pkg:npm/through2@0.6.5"
      ]
    },
    {
      "ref": "pkg:npm/gulp-tslint@7.1.0",
      "dependsOn": [
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/cli@1.0.1",
      "dependsOn": [
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/date-now@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/console-browserify@1.1.0",
      "dependsOn": [
        "pkg:npm/date-now@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domhandler@2.3.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.5.1",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/entities@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/htmlparser2@3.8.3",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.3.0",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.0.0",
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash@3.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shelljs@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jshint@2.9.5",
      "dependsOn": [
        "pkg:npm/cli@1.0.1",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/htmlparser2@3.8.3",
        "pkg:npm/lodash@3.7.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/shelljs@0.3.0",
        "pkg:npm/strip-json-comments@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/marked@0.3.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.3.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.11",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jade@0.26.3",
      "dependsOn": [
        "pkg:npm/commander@0.6.1",
        "pkg:npm/mkdirp@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-iso-string@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mocha@2.5.3",
      "dependsOn": [
        "pkg:npm/commander@2.3.0",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/diff@1.4.0",
        "pkg:npm/escape-string-regexp@1.0.2",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/growl@1.9.2",
        "pkg:npm/jade@0.26.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/supports-color@1.2.0",
        "pkg:npm/to-iso-string@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/run-sequence@1.2.2",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/gulp-util@3.0.8"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-code-frame@6.26.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/js-tokens@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@5.0.15",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@0.3.0",
      "dependsOn": [
        "pkg:npm/glob@5.0.15"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/tsutils@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-align@2.0.0",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.0",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@4.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.3.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-boxes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pseudomap@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@4.1.1",
      "dependsOn": [
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/yallist@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@5.1.0",
      "dependsOn": [
        "pkg:npm/lru-cache@4.1.1",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@0.7.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/term-size@1.2.0",
      "dependsOn": [
        "pkg:npm/execa@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/widest-line@2.0.0",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/boxen@1.3.0",
      "dependsOn": [
        "pkg:npm/ansi-align@2.0.0",
        "pkg:npm/camelcase@4.1.0",
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/cli-boxes@1.0.0",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/term-size@1.2.0",
        "pkg:npm/widest-line@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-prop@4.2.0",
      "dependsOn": [
        "pkg:npm/is-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@1.1.0",
      "dependsOn": [
        "pkg:npm/pify@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/crypto-random-string@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-string@1.0.0",
      "dependsOn": [
        "pkg:npm/crypto-random-string@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/write-file-atomic@2.3.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xdg-basedir@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/configstore@3.1.1",
      "dependsOn": [
        "pkg:npm/dot-prop@4.2.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/make-dir@1.1.0",
        "pkg:npm/unique-string@1.0.0",
        "pkg:npm/write-file-atomic@2.3.0",
        "pkg:npm/xdg-basedir@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/import-lazy@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global-dirs@0.1.1",
      "dependsOn": [
        "pkg:npm/ini@1.3.5"
      ]
    },
    {
      "ref": "pkg:npm/is-installed-globally@0.1.0",
      "dependsOn": [
        "pkg:npm/global-dirs@0.1.1",
        "pkg:npm/is-path-inside@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-npm@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/capture-stack-trace@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/create-error-class@3.0.2",
      "dependsOn": [
        "pkg:npm/capture-stack-trace@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/duplexer3@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-redirect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-retry-allowed@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lowercase-keys@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timed-out@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unzip-response@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prepend-http@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse-lax@1.0.0",
      "dependsOn": [
        "pkg:npm/prepend-http@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/got@6.7.1",
      "dependsOn": [
        "pkg:npm/create-error-class@3.0.2",
        "pkg:npm/duplexer3@0.1.4",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-redirect@1.0.0",
        "pkg:npm/is-retry-allowed@1.1.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/lowercase-keys@1.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/timed-out@4.0.1",
        "pkg:npm/unzip-response@2.0.1",
        "pkg:npm/url-parse-lax@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.2",
      "dependsOn": [
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.5",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-auth-token@3.3.1",
      "dependsOn": [
        "pkg:npm/rc@1.2.2",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@3.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/package-json@4.0.1",
      "dependsOn": [
        "pkg:npm/got@6.7.1",
        "pkg:npm/registry-auth-token@3.3.1",
        "pkg:npm/registry-url@3.1.0",
        "pkg:npm/semver@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@3.1.0",
      "dependsOn": [
        "pkg:npm/package-json@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/semver-diff@2.1.0",
      "dependsOn": [
        "pkg:npm/semver@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/update-notifier@2.3.0",
      "dependsOn": [
        "pkg:npm/boxen@1.3.0",
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/configstore@3.1.1",
        "pkg:npm/import-lazy@2.1.0",
        "pkg:npm/is-installed-globally@0.1.0",
        "pkg:npm/is-npm@1.0.0",
        "pkg:npm/latest-version@3.1.0",
        "pkg:npm/semver-diff@2.1.0",
        "pkg:npm/xdg-basedir@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tslint@4.5.1",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/colors@1.1.2",
        "pkg:npm/diff@3.4.0",
        "pkg:npm/findup-sync@0.3.0",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/tsutils@1.9.1",
        "pkg:npm/update-notifier@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/esutils@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@0.7.2",
      "dependsOn": [
        "pkg:npm/esutils@1.1.6",
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/tslint-eslint-rules@3.5.1",
      "dependsOn": [
        "pkg:npm/doctrine@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/typescript@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vrsource-tslint-rules@4.0.1",
      "dependsOn": [
        "pkg:npm/tslint@4.5.1"
      ]
    },
    {
      "ref": "pkg:npm/protractor@5.4.4-tuxcare.2",
      "dependsOn": [
        "pkg:npm/@types/chalk@0.4.31",
        "pkg:npm/@types/glob@5.0.35",
        "pkg:npm/@types/jasmine@2.8.5",
        "pkg:npm/@types/jasminewd2@2.0.3",
        "pkg:npm/@types/minimatch@2.0.29",
        "pkg:npm/@types/node@6.0.96",
        "pkg:npm/@types/q@0.0.32",
        "pkg:npm/@types/selenium-webdriver@3.0.10",
        "pkg:npm/blocking-proxy@1.0.1",
        "pkg:npm/body-parser@1.15.2",
        "pkg:npm/browserstack@1.5.1",
        "pkg:npm/chai-as-promised@5.3.0",
        "pkg:npm/chai@3.5.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/clang-format@1.0.49",
        "pkg:npm/expect.js@0.3.1",
        "pkg:npm/express@4.14.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/gulp-clang-format@1.0.23",
        "pkg:npm/gulp-tslint@7.1.0",
        "pkg:npm/gulp@3.9.1",
        "pkg:npm/jasmine@2.8.0",
        "pkg:npm/jasminewd2@2.2.0",
        "pkg:npm/jshint@2.9.5",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/marked@0.3.12",
        "pkg:npm/mocha@2.5.3",
        "pkg:npm/natives@1.1.6",
        "pkg:npm/q@1.4.1",
        "pkg:npm/rimraf@2.5.4",
        "pkg:npm/run-sequence@1.2.2",
        "pkg:npm/saucelabs@1.5.0",
        "pkg:npm/selenium-webdriver@3.6.0-tuxcare.1",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/source-map-support@0.4.18",
        "pkg:npm/tslint-eslint-rules@3.5.1",
        "pkg:npm/tslint@4.5.1",
        "pkg:npm/typescript@2.6.2",
        "pkg:npm/vrsource-tslint-rules@4.0.1",
        "pkg:npm/webdriver-js-extender@2.1.0-tuxcare.1",
        "pkg:npm/webdriver-manager@12.1.9-tuxcare.1",
        "pkg:npm/yargs@12.0.5"
      ]
    },
    {
      "ref": "pkg:npm/bower@1.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-immediate-shim@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/each-async@1.1.1",
      "dependsOn": [
        "pkg:npm/onetime@1.1.0",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array-differ@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@0.1.0",
      "dependsOn": [
        "pkg:npm/array-uniq@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/async@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globby@0.1.1",
      "dependsOn": [
        "pkg:npm/array-differ@0.1.0",
        "pkg:npm/array-union@0.1.0",
        "pkg:npm/async@0.9.2",
        "pkg:npm/glob@4.5.3"
      ]
    },
    {
      "ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "dependsOn": [
        "pkg:npm/is-path-inside@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.2",
      "dependsOn": [
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/del@0.1.3",
      "dependsOn": [
        "pkg:npm/each-async@1.1.1",
        "pkg:npm/globby@0.1.1",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/canonical-path@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dependency-graph@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/di@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@3.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/objectdiff@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate.js@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cycle@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eyes@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stack-trace@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/winston@2.4.0",
      "dependsOn": [
        "pkg:npm/async@1.0.0",
        "pkg:npm/colors@1.0.3",
        "pkg:npm/cycle@1.0.3",
        "pkg:npm/eyes@0.1.8",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/stack-trace@0.0.10"
      ]
    },
    {
      "ref": "pkg:npm/dgeni@0.4.9",
      "dependsOn": [
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/dependency-graph@0.4.1",
        "pkg:npm/di@0.0.1",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/objectdiff@1.1.0",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@1.4.1",
        "pkg:npm/validate.js@0.9.0",
        "pkg:npm/winston@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore-contrib@0.3.0",
      "dependsOn": [
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/catharsis@0.8.9",
      "dependsOn": [
        "pkg:npm/underscore-contrib@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/lower-case@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sentence-case@1.1.3",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/upper-case@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camel-case@1.2.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/snake-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/constant-case@1.1.2",
      "dependsOn": [
        "pkg:npm/snake-case@1.1.2",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/dot-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/is-lower-case@1.1.3",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/is-upper-case@1.1.2",
      "dependsOn": [
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/lower-case-first@1.0.2",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/param-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/upper-case-first@1.1.2",
      "dependsOn": [
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/pascal-case@1.1.2",
      "dependsOn": [
        "pkg:npm/camel-case@1.2.2",
        "pkg:npm/upper-case-first@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/path-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/swap-case@1.1.2",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/title-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/change-case@2.3.1",
      "dependsOn": [
        "pkg:npm/camel-case@1.2.2",
        "pkg:npm/constant-case@1.1.2",
        "pkg:npm/dot-case@1.1.2",
        "pkg:npm/is-lower-case@1.1.3",
        "pkg:npm/is-upper-case@1.1.2",
        "pkg:npm/lower-case-first@1.0.2",
        "pkg:npm/lower-case@1.1.4",
        "pkg:npm/param-case@1.1.2",
        "pkg:npm/pascal-case@1.1.2",
        "pkg:npm/path-case@1.1.2",
        "pkg:npm/sentence-case@1.1.3",
        "pkg:npm/snake-case@1.1.2",
        "pkg:npm/swap-case@1.1.2",
        "pkg:npm/title-case@1.1.2",
        "pkg:npm/upper-case-first@1.1.2",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/espree@2.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domhandler@2.4.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.6.2",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.9.2",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.4.1",
        "pkg:npm/domutils@1.6.2",
        "pkg:npm/entities@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash@2.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-html-encoder@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async-each@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdirp@1.3.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/minimatch@0.2.14",
        "pkg:npm/readable-stream@1.0.34"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@0.12.6",
      "dependsOn": [
        "pkg:npm/async-each@0.1.6",
        "pkg:npm/readdirp@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/nunjucks@1.3.4",
      "dependsOn": [
        "pkg:npm/chokidar@0.12.6",
        "pkg:npm/optimist@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/q@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/weak-map@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/collections@0.2.2",
      "dependsOn": [
        "pkg:npm/weak-map@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimeparse@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@0.9.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url2@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q-io@1.10.9",
      "dependsOn": [
        "pkg:npm/collections@0.2.2",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/mimeparse@0.1.4",
        "pkg:npm/q@0.9.7",
        "pkg:npm/qs@0.1.0",
        "pkg:npm/url2@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-list@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringmap@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-jar@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@0.0.7",
      "dependsOn": [
        "pkg:npm/delayed-stream@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/form-data@0.0.10",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.7.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.3.8",
      "dependsOn": [
        "pkg:npm/hoek@0.7.6"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.1.3",
      "dependsOn": [
        "pkg:npm/boom@0.3.8"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.1.4",
      "dependsOn": [
        "pkg:npm/hoek@0.7.6"
      ]
    },
    {
      "ref": "pkg:npm/hawk@0.10.2",
      "dependsOn": [
        "pkg:npm/boom@0.3.8",
        "pkg:npm/cryptiles@0.1.3",
        "pkg:npm/hoek@0.7.6",
        "pkg:npm/sntp@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/json-stringify-safe@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-uuid@1.4.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.16.6",
      "dependsOn": [
        "pkg:npm/aws-sign@0.2.0",
        "pkg:npm/cookie-jar@0.2.0",
        "pkg:npm/forever-agent@0.2.0",
        "pkg:npm/form-data@0.0.10",
        "pkg:npm/hawk@0.10.2",
        "pkg:npm/json-stringify-safe@3.0.0",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/node-uuid@1.4.8",
        "pkg:npm/oauth-sign@0.2.0",
        "pkg:npm/qs@0.5.6",
        "pkg:npm/tunnel-agent@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/winston@0.7.3",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/colors@0.6.2",
        "pkg:npm/cycle@1.0.3",
        "pkg:npm/eyes@0.1.8",
        "pkg:npm/pkginfo@0.3.1",
        "pkg:npm/request@2.16.6",
        "pkg:npm/stack-trace@0.0.10"
      ]
    },
    {
      "ref": "pkg:npm/dgeni-packages@0.11.1",
      "dependsOn": [
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/catharsis@0.8.9",
        "pkg:npm/change-case@2.3.1",
        "pkg:npm/dgeni@0.4.9",
        "pkg:npm/espree@2.2.5",
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/htmlparser2@3.9.2",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/marked@0.3.12",
        "pkg:npm/minimatch@0.3.0",
        "pkg:npm/node-html-encoder@0.0.2",
        "pkg:npm/nunjucks@1.3.4",
        "pkg:npm/q-io@1.10.9",
        "pkg:npm/q@1.0.1",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/shelljs@0.5.3",
        "pkg:npm/spdx-license-list@2.1.0",
        "pkg:npm/stringmap@0.2.2",
        "pkg:npm/winston@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-support@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fancy-log@1.3.2",
      "dependsOn": [
        "pkg:npm/ansi-gray@0.1.1",
        "pkg:npm/color-support@1.1.3",
        "pkg:npm/time-stamp@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glogg@1.0.1",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-file@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@3.1.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/arr-diff@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-unique@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@6.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-descriptor@1.0.2",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@1.0.0",
        "pkg:npm/is-data-descriptor@1.0.0",
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/define-property@1.0.0",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/extend-shallow@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/to-regex-range@2.1.1",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@4.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1",
        "pkg:npm/to-regex-range@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object-visit@1.0.1",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/map-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/collection-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/map-visit@1.0.0",
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/component-emitter@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-value@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-values@1.0.0",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@1.0.0",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assign-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@1.0.1",
      "dependsOn": [
        "pkg:npm/is-plain-object@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/extend-shallow@3.0.2",
      "dependsOn": [
        "pkg:npm/assign-symbols@1.0.0",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/split-string@3.1.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/set-value@2.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/split-string@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-object-path@0.3.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/arr-union@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-value@0.4.3",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/to-object-path@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/union-value@1.0.0",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/set-value@0.4.3"
      ]
    },
    {
      "ref": "pkg:npm/has-values@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-value@0.3.1",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@0.1.4",
        "pkg:npm/isobject@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unset-value@1.0.0",
      "dependsOn": [
        "pkg:npm/has-value@0.3.1",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cache-base@1.0.1",
      "dependsOn": [
        "pkg:npm/collection-visit@1.0.0",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-value@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/set-value@2.0.0",
        "pkg:npm/to-object-path@0.3.0",
        "pkg:npm/union-value@1.0.0",
        "pkg:npm/unset-value@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@0.1.6",
        "pkg:npm/is-data-descriptor@0.1.4",
        "pkg:npm/kind-of@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/define-property@0.2.5",
      "dependsOn": [
        "pkg:npm/is-descriptor@0.1.6"
      ]
    },
    {
      "ref": "pkg:npm/copy-descriptor@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-copy@0.1.0",
      "dependsOn": [
        "pkg:npm/copy-descriptor@0.1.1",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/static-extend@0.1.2",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/object-copy@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/class-utils@0.3.6",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/static-extend@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/mixin-deep@1.3.0",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pascalcase@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base@0.11.2",
      "dependsOn": [
        "pkg:npm/cache-base@1.0.1",
        "pkg:npm/class-utils@0.3.6",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/mixin-deep@1.3.0",
        "pkg:npm/pascalcase@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/atob@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decode-uri-component@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-url@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-url@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urix@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-resolve@0.5.1",
      "dependsOn": [
        "pkg:npm/atob@2.0.3",
        "pkg:npm/decode-uri-component@0.2.0",
        "pkg:npm/resolve-url@0.2.1",
        "pkg:npm/source-map-url@0.4.0",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/set-getter@0.1.0",
      "dependsOn": [
        "pkg:npm/to-object-path@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/lazy-cache@2.0.2",
      "dependsOn": [
        "pkg:npm/set-getter@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/use@2.0.2",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/lazy-cache@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon@0.8.1",
      "dependsOn": [
        "pkg:npm/base@0.11.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/source-map-resolve@0.5.1",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/use@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-util@3.0.1",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-node@2.1.1",
      "dependsOn": [
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/snapdragon-util@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/regex-not@1.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/to-regex@3.0.1",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/regex-not@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/braces@2.3.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fill-range@4.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/snapdragon-node@2.1.1",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/split-string@3.1.0",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/posix-character-classes@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@2.1.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/posix-character-classes@0.1.1",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fragment-cache@0.2.1",
      "dependsOn": [
        "pkg:npm/map-cache@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/extglob@2.0.4",
      "dependsOn": [
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/expand-brackets@2.1.4",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-odd@1.0.0",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/nanomatch@1.2.7",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/is-odd@1.0.0",
        "pkg:npm/kind-of@5.1.0",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@3.1.5",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/braces@2.3.0",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/extglob@2.0.4",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/kind-of@6.0.2",
        "pkg:npm/nanomatch@1.2.7",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global-prefix@1.0.2",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/homedir-polyfill@1.0.1",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/global-modules@1.0.0",
      "dependsOn": [
        "pkg:npm/global-prefix@1.0.2",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/resolve-dir@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve-dir@1.0.1",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/global-modules@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@2.0.0",
      "dependsOn": [
        "pkg:npm/detect-file@1.0.0",
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/micromatch@3.1.5",
        "pkg:npm/resolve-dir@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-unc-path@1.0.0",
      "dependsOn": [
        "pkg:npm/unc-path-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-relative@1.0.0",
      "dependsOn": [
        "pkg:npm/is-unc-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute@1.0.0",
      "dependsOn": [
        "pkg:npm/is-relative@1.0.0",
        "pkg:npm/is-windows@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-filepath@1.0.2",
      "dependsOn": [
        "pkg:npm/is-absolute@1.0.0",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/path-root@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/flagged-respawn@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-iterator@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/object.map@1.0.1",
      "dependsOn": [
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/make-iterator@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/liftoff@2.5.0",
      "dependsOn": [
        "pkg:npm/extend@3.0.1",
        "pkg:npm/findup-sync@2.0.0",
        "pkg:npm/fined@1.1.0",
        "pkg:npm/flagged-respawn@1.0.0",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.map@1.0.1",
        "pkg:npm/rechoir@0.6.2",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/natives@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-with-sourcemaps@1.0.5",
      "dependsOn": [
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-buffer@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cloneable-readable@1.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/replace-ext@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@2.1.0",
      "dependsOn": [
        "pkg:npm/clone-buffer@1.0.0",
        "pkg:npm/clone-stats@1.0.0",
        "pkg:npm/clone@2.1.1",
        "pkg:npm/cloneable-readable@1.0.0",
        "pkg:npm/remove-trailing-separator@1.1.0",
        "pkg:npm/replace-ext@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-concat@2.6.1",
      "dependsOn": [
        "pkg:npm/concat-with-sourcemaps@1.0.5",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/basic-auth-connect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.3.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/statuses@1.2.1",
        "pkg:npm/statuses@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/body-parser@1.13.3",
      "dependsOn": [
        "pkg:npm/bytes@2.1.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/iconv-lite@0.4.11",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@4.0.0",
        "pkg:npm/raw-body@2.1.7",
        "pkg:npm/type-is@1.6.15"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.2.13",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/compressible@2.0.12",
      "dependsOn": [
        "pkg:npm/mime-db@1.30.0"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.5.2",
      "dependsOn": [
        "pkg:npm/accepts@1.2.13",
        "pkg:npm/bytes@2.1.0",
        "pkg:npm/compressible@2.0.12",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/vary@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/connect-timeout@1.6.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/on-headers@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-parser@1.3.5",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/rndm@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsscmp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/random-bytes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uid-safe@2.1.4",
      "dependsOn": [
        "pkg:npm/random-bytes@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/csrf@3.0.6",
      "dependsOn": [
        "pkg:npm/rndm@1.2.0",
        "pkg:npm/tsscmp@1.0.5",
        "pkg:npm/uid-safe@2.1.4"
      ]
    },
    {
      "ref": "pkg:npm/csurf@1.8.3",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/csrf@3.0.6",
        "pkg:npm/http-errors@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/errorhandler@1.4.3",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/escape-html@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/crc@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-url@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uid-safe@2.0.0",
      "dependsOn": [
        "pkg:npm/base64-url@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/express-session@1.11.3",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/crc@3.3.0",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/uid-safe@2.0.0",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/escape-html@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@0.4.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/method-override@2.3.10",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/basic-auth@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/morgan@1.6.1",
      "dependsOn": [
        "pkg:npm/basic-auth@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/on-headers@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/stream-counter@0.2.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/multiparty@3.3.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/stream-counter@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/pause@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/response-time@2.3.2",
      "dependsOn": [
        "pkg:npm/depd@1.1.2",
        "pkg:npm/on-headers@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-favicon@2.3.2",
      "dependsOn": [
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/ms@0.7.2",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.7.3",
      "dependsOn": [
        "pkg:npm/accepts@1.2.13",
        "pkg:npm/batch@0.5.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.13.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.0.3",
        "pkg:npm/statuses@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.10.3",
      "dependsOn": [
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.13.2"
      ]
    },
    {
      "ref": "pkg:npm/vhost@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@2.30.2",
      "dependsOn": [
        "pkg:npm/basic-auth-connect@1.0.0",
        "pkg:npm/body-parser@1.13.3",
        "pkg:npm/bytes@2.1.0",
        "pkg:npm/compression@1.5.2",
        "pkg:npm/connect-timeout@1.6.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-parser@1.3.5",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/csurf@1.8.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/errorhandler@1.4.3",
        "pkg:npm/express-session@1.11.3",
        "pkg:npm/finalhandler@0.4.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/method-override@2.3.10",
        "pkg:npm/morgan@1.6.1",
        "pkg:npm/multiparty@3.3.2",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/pause@0.1.0",
        "pkg:npm/qs@4.0.0",
        "pkg:npm/response-time@2.3.2",
        "pkg:npm/serve-favicon@2.3.2",
        "pkg:npm/serve-index@1.7.3",
        "pkg:npm/serve-static@1.10.3",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vhost@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/connect-livereload@0.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/body-parser@1.14.2",
      "dependsOn": [
        "pkg:npm/bytes@2.2.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/iconv-lite@0.4.13",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@5.2.0",
        "pkg:npm/raw-body@2.1.7",
        "pkg:npm/type-is@1.6.15"
      ]
    },
    {
      "ref": "pkg:npm/http-parser-js@0.4.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-extensions@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-driver@0.7.0",
      "dependsOn": [
        "pkg:npm/http-parser-js@0.4.9",
        "pkg:npm/websocket-extensions@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.10.0",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/livereload-js@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tiny-lr@0.2.1",
      "dependsOn": [
        "pkg:npm/body-parser@1.14.2",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/faye-websocket@0.10.0",
        "pkg:npm/livereload-js@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/qs@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-connect@2.3.1",
      "dependsOn": [
        "pkg:npm/connect-livereload@0.5.4",
        "pkg:npm/connect@2.30.2",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/tiny-lr@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clean-css@2.2.23",
      "dependsOn": [
        "pkg:npm/commander@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/aws-sign2@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.1.4",
      "dependsOn": [
        "pkg:npm/async@0.9.2",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.4.2",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.2.2",
      "dependsOn": [
        "pkg:npm/boom@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.2.4",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/hawk@1.1.1",
      "dependsOn": [
        "pkg:npm/boom@0.4.2",
        "pkg:npm/cryptiles@0.2.2",
        "pkg:npm/hoek@0.9.1",
        "pkg:npm/sntp@0.2.4"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctype@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@0.10.1",
      "dependsOn": [
        "pkg:npm/asn1@0.1.11",
        "pkg:npm/assert-plus@0.1.5",
        "pkg:npm/ctype@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/mime-types@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringstream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.3.3",
      "dependsOn": [
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.40.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/hawk@1.1.1",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.8",
        "pkg:npm/oauth-sign@0.3.0",
        "pkg:npm/qs@1.0.2",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.3",
        "pkg:npm/tunnel-agent@0.4.3"
      ]
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/less@1.7.5",
      "dependsOn": [
        "pkg:npm/clean-css@2.2.23",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/request@2.40.0",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/lodash._objecttypes@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isnative@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._shimkeys@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isobject@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.keys@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1",
        "pkg:npm/lodash._shimkeys@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.defaults@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/xtend@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@0.5.1",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/xtend@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "dependsOn": [
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/gulp-less@1.3.9",
      "dependsOn": [
        "pkg:npm/convert-source-map@0.4.1",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/less@1.7.5",
        "pkg:npm/lodash.defaults@2.4.1",
        "pkg:npm/through2@0.5.1",
        "pkg:npm/vinyl-sourcemaps-apply@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/gulp-markdown@1.2.0",
      "dependsOn": [
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/marked@0.3.12",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/graceful-readlink@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.8.1",
      "dependsOn": [
        "pkg:npm/graceful-readlink@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.4.4",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/clean-css@3.4.28",
      "dependsOn": [
        "pkg:npm/commander@2.8.1",
        "pkg:npm/source-map@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/bufferstreams@1.0.1",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-bufferstream@1.0.1",
      "dependsOn": [
        "pkg:npm/bufferstreams@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/gulp-clean-css@2.0.6",
      "dependsOn": [
        "pkg:npm/clean-css@3.4.28",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/vinyl-bufferstream@1.0.1",
        "pkg:npm/vinyl-sourcemaps-apply@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-rename@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/split@0.2.10",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/event-stream@3.0.20",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.0.7",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.2.10",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/binaryextensions@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/textextensions@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istextorbinary@1.0.2",
      "dependsOn": [
        "pkg:npm/binaryextensions@1.0.1",
        "pkg:npm/textextensions@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/replacestream@0.1.3",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/gulp-replace@0.4.0",
      "dependsOn": [
        "pkg:npm/event-stream@3.0.20",
        "pkg:npm/istextorbinary@1.0.2",
        "pkg:npm/replacestream@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/jasmine-core@2.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine@2.3.2",
      "dependsOn": [
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/jasmine-core@2.3.4"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@1.3.2",
      "dependsOn": [
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/normalize-path@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/async-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/binary-extensions@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@1.0.1",
      "dependsOn": [
        "pkg:npm/binary-extensions@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@2.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@1.7.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.2",
        "pkg:npm/async-each@1.0.1",
        "pkg:npm/fsevents@1.2.3",
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/readdirp@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/i@0.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ncp@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utile@0.2.1",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/i@0.3.6",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/ncp@0.4.2",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy@0.10.4",
      "dependsOn": [
        "pkg:npm/colors@0.6.2",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/pkginfo@0.3.1",
        "pkg:npm/utile@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/log4js@0.6.38",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/semver@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64id@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/policyfile@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zeparser@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/active-x-obfuscator@0.0.1",
      "dependsOn": [
        "pkg:npm/zeparser@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/options@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinycolor@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@0.4.32",
      "dependsOn": [
        "pkg:npm/commander@2.1.0",
        "pkg:npm/nan@1.0.0",
        "pkg:npm/options@0.0.6",
        "pkg:npm/tinycolor@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xmlhttprequest@1.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-client@0.9.16",
      "dependsOn": [
        "pkg:npm/active-x-obfuscator@0.0.1",
        "pkg:npm/uglify-js@1.2.5",
        "pkg:npm/ws@0.4.32",
        "pkg:npm/xmlhttprequest@1.4.2"
      ]
    },
    {
      "ref": "pkg:npm/redis@0.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io@0.9.16",
      "dependsOn": [
        "pkg:npm/base64id@0.1.0",
        "pkg:npm/policyfile@0.0.4",
        "pkg:npm/redis@0.7.3",
        "pkg:npm/socket.io-client@0.9.16"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.33",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/useragent@2.2.1",
      "dependsOn": [
        "pkg:npm/lru-cache@2.2.4",
        "pkg:npm/tmp@0.0.33"
      ]
    },
    {
      "ref": "pkg:npm/karma@0.12.37",
      "dependsOn": [
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/colors@1.1.2",
        "pkg:npm/connect@2.30.2",
        "pkg:npm/di@0.0.1",
        "pkg:npm/glob@5.0.15",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/http-proxy@0.10.4",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/log4js@0.6.38",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@1.4.1",
        "pkg:npm/rimraf@2.6.2",
        "pkg:npm/socket.io@0.9.16",
        "pkg:npm/source-map@0.4.4",
        "pkg:npm/useragent@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/karma-chrome-launcher@0.1.12",
      "dependsOn": [
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/karma-jasmine@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/website@0.0.1",
      "dependsOn": [
        "pkg:npm/bower@1.8.2",
        "pkg:npm/del@0.1.3",
        "pkg:npm/dgeni-packages@0.11.1",
        "pkg:npm/dgeni@0.4.9",
        "pkg:npm/esprima@1.1.0",
        "pkg:npm/gulp-clean-css@2.0.6",
        "pkg:npm/gulp-concat@2.6.1",
        "pkg:npm/gulp-connect@2.3.1",
        "pkg:npm/gulp-less@1.3.9",
        "pkg:npm/gulp-markdown@1.2.0",
        "pkg:npm/gulp-rename@1.2.2",
        "pkg:npm/gulp-replace@0.4.0",
        "pkg:npm/gulp@3.9.1",
        "pkg:npm/jasmine@2.3.2",
        "pkg:npm/karma-chrome-launcher@0.1.12",
        "pkg:npm/karma-jasmine@0.1.6",
        "pkg:npm/karma@0.12.37",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/marked@0.3.12"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@angular/common@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/compiler@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/core@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/http@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/platform-browser@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/animations@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/platform-browser-dynamic@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/router@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/upgrade@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/angular@1.6.39",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/core-js@0.9.43",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@6.0.93",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/reflect-metadata@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/symbol-observable@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rxjs@5.4.3",
      "dependsOn": [
        "pkg:npm/symbol-observable@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/when@3.7.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/systemjs@0.19.27",
      "dependsOn": [
        "pkg:npm/when@3.7.8"
      ]
    },
    {
      "ref": "pkg:npm/zone.js@0.8.18",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bluebird@2.9.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@0.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@0.3.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@0.5.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@1.1.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@0.1.0",
        "pkg:npm/strip-ansi@0.3.0",
        "pkg:npm/supports-color@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-spawn@0.2.9",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3"
      ]
    },
    {
      "ref": "pkg:npm/moment@2.19.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rx@2.3.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concurrently@2.2.0",
      "dependsOn": [
        "pkg:npm/bluebird@2.9.6",
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/commander@2.6.0",
        "pkg:npm/cross-spawn@0.2.9",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/moment@2.19.4",
        "pkg:npm/rx@2.3.24"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@1.0.10",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.2",
        "pkg:npm/ipaddr.js@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/destroy@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.13.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/destroy@1.0.3",
        "pkg:npm/escape-html@1.0.2",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.0.3",
        "pkg:npm/statuses@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/express@4.13.3",
      "dependsOn": [
        "pkg:npm/accepts@1.2.13",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/content-disposition@0.5.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/escape-html@1.0.2",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/finalhandler@0.4.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/merge-descriptors@1.0.0",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@1.0.10",
        "pkg:npm/qs@4.0.0",
        "pkg:npm/range-parser@1.0.3",
        "pkg:npm/send@0.13.0",
        "pkg:npm/serve-static@1.10.3",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vary@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-sync-client@2.5.1",
      "dependsOn": [
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/async-each-series@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect-history-api-fallback@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/immutable@3.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/server-destroy@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/limiter@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-throttle@0.1.3",
      "dependsOn": [
        "pkg:npm/commander@2.6.0",
        "pkg:npm/limiter@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/formidable@1.0.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@1.9.2",
      "dependsOn": [
        "pkg:npm/formidable@1.0.17",
        "pkg:npm/mime@1.2.4",
        "pkg:npm/qs@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/express@2.5.11",
      "dependsOn": [
        "pkg:npm/connect@1.9.2",
        "pkg:npm/mime@1.2.4",
        "pkg:npm/mkdirp@0.3.0",
        "pkg:npm/qs@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@3.0.6",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV",
      "dependsOn": [
        "pkg:npm/express@2.5.11",
        "pkg:npm/nopt@3.0.6",
        "pkg:npm/underscore@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/browser-sync-ui@0.6.3",
      "dependsOn": [
        "pkg:npm/async-each-series@0.1.1",
        "pkg:npm/connect-history-api-fallback@1.5.0",
        "pkg:npm/immutable@3.8.1",
        "pkg:npm/server-destroy@1.0.1",
        "pkg:npm/stream-throttle@0.1.3",
        "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV"
      ]
    },
    {
      "ref": "pkg:npm/bs-recipes@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.21",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/needle@2.2.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/iconv-lite@0.4.21",
        "pkg:npm/sax@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/osenv@0.1.5",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/nopt@4.0.1",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.1",
        "pkg:npm/osenv@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ignore-walk@3.0.1",
      "dependsOn": [
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/npm-bundled@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-packlist@1.1.10",
      "dependsOn": [
        "pkg:npm/ignore-walk@3.0.1",
        "pkg:npm/npm-bundled@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/delegates@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/are-we-there-yet@1.1.4",
      "dependsOn": [
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/readable-stream@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/console-control-strings@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aproba@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-unicode@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wide-align@1.1.2",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/gauge@2.7.4",
      "dependsOn": [
        "pkg:npm/aproba@1.2.0",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wide-align@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/npmlog@4.1.2",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@1.1.4",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@2.7.4",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/rc@1.2.6",
      "dependsOn": [
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/chownr@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass@2.2.4",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/yallist@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fs-minipass@1.2.5",
      "dependsOn": [
        "pkg:npm/minipass@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/minizlib@1.1.0",
      "dependsOn": [
        "pkg:npm/minipass@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/tar@4.4.1",
      "dependsOn": [
        "pkg:npm/chownr@1.0.1",
        "pkg:npm/fs-minipass@1.2.5",
        "pkg:npm/minipass@2.2.4",
        "pkg:npm/minizlib@1.1.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/yallist@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.9.1",
      "dependsOn": [
        "pkg:npm/detect-libc@1.0.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/needle@2.2.0",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npm-packlist@1.1.10",
        "pkg:npm/npmlog@4.1.2",
        "pkg:npm/rc@1.2.6",
        "pkg:npm/rimraf@2.6.2",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/tar@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.2.3",
      "dependsOn": [
        "pkg:npm/nan@2.10.0",
        "pkg:npm/node-pre-gyp@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/finalhandler@0.5.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/connect@3.5.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/finalhandler@0.5.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dev-ip@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/easy-extender@2.3.2",
      "dependsOn": [
        "pkg:npm/lodash@3.10.1"
      ]
    },
    {
      "ref": "pkg:npm/object-path@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tfunk@3.1.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/object-path@0.9.2"
      ]
    },
    {
      "ref": "pkg:npm/eazy-logger@3.0.2",
      "dependsOn": [
        "pkg:npm/tfunk@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/emitter-steward@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jsonfile@3.0.1",
        "pkg:npm/universalify@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/eventemitter3@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requires-port@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy@1.15.2",
      "dependsOn": [
        "pkg:npm/eventemitter3@1.2.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.8",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/openurl@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.5",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.1.4",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/co@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify@1.0.1",
      "dependsOn": [
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@4.11.8",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@4.2.1",
      "dependsOn": [
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/har-schema@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/hoek@2.16.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@2.10.1",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@2.0.5",
      "dependsOn": [
        "pkg:npm/boom@2.10.1"
      ]
    },
    {
      "ref": "pkg:npm/sntp@1.0.9",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/hawk@3.1.3",
      "dependsOn": [
        "pkg:npm/boom@2.10.1",
        "pkg:npm/cryptiles@2.0.5",
        "pkg:npm/hoek@2.16.3",
        "pkg:npm/sntp@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.1",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.13.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.1.1",
      "dependsOn": [
        "pkg:npm/assert-plus@0.2.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.13.1"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uuid@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.81.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.6.0",
        "pkg:npm/aws4@1.6.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/extend@3.0.1",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.1.4",
        "pkg:npm/har-validator@4.2.1",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/http-signature@1.1.1",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/oauth-sign@0.8.2",
        "pkg:npm/performance-now@0.2.0",
        "pkg:npm/qs@6.4.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.3",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@3.2.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/invert-kv@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@1.0.0",
      "dependsOn": [
        "pkg:npm/invert-kv@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@1.4.0",
      "dependsOn": [
        "pkg:npm/lcid@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/window-size@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.29.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/window-size@0.1.4",
        "pkg:npm/y18n@3.2.1"
      ]
    },
    {
      "ref": "pkg:npm/localtunnel@1.8.3",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/openurl@1.1.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/yargs@3.29.0"
      ]
    },
    {
      "ref": "pkg:npm/opn@4.0.2",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isfinite@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number-like@1.0.8",
      "dependsOn": [
        "pkg:npm/lodash.isfinite@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/portscanner@2.1.1",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/is-number-like@1.0.8"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resp-modifier@6.0.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/rx@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.8.0",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/batch@0.5.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.5.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/ms@0.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.4",
      "dependsOn": [
        "pkg:npm/ms@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fresh@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.2",
      "dependsOn": [
        "pkg:npm/depd@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.0.3",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ms@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.15.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.4",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.0",
        "pkg:npm/http-errors@1.6.2",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@1.0.0",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.12.2",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.15.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.3.3",
      "dependsOn": [
        "pkg:npm/ms@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/accepts@1.3.3",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/after@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arraybuffer.slice@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-arraybuffer@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blob@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-binary@0.1.6",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wtf-8@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-parser@1.3.1",
      "dependsOn": [
        "pkg:npm/after@0.8.1",
        "pkg:npm/arraybuffer.slice@0.0.6",
        "pkg:npm/base64-arraybuffer@0.1.5",
        "pkg:npm/blob@0.0.4",
        "pkg:npm/has-binary@0.1.6",
        "pkg:npm/wtf-8@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ultron@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@1.1.1",
      "dependsOn": [
        "pkg:npm/options@0.0.6",
        "pkg:npm/ultron@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/engine.io@1.8.0",
      "dependsOn": [
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/base64id@0.1.0",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io-parser@1.3.1",
        "pkg:npm/ws@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-binary@0.1.7",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-emitter@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json3@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-parser@2.3.1",
      "dependsOn": [
        "pkg:npm/component-emitter@1.1.2",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/json3@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/socket.io-adapter@0.5.0",
      "dependsOn": [
        "pkg:npm/debug@2.3.3",
        "pkg:npm/socket.io-parser@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/backo2@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-bind@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-inherit@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-cors@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/indexof@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsite@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/better-assert@1.0.2",
      "dependsOn": [
        "pkg:npm/callsite@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/parsejson@0.0.3",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseqs@0.0.5",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseuri@0.0.5",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xmlhttprequest-ssl@1.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yeast@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-client@1.8.0",
      "dependsOn": [
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/component-inherit@0.0.3",
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io-parser@1.3.1",
        "pkg:npm/has-cors@1.1.0",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/parsejson@0.0.3",
        "pkg:npm/parseqs@0.0.5",
        "pkg:npm/parseuri@0.0.5",
        "pkg:npm/ws@1.1.1",
        "pkg:npm/xmlhttprequest-ssl@1.5.3",
        "pkg:npm/yeast@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/object-component@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-array@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-client@1.6.0",
      "dependsOn": [
        "pkg:npm/backo2@1.0.2",
        "pkg:npm/component-bind@1.0.0",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io-client@1.8.0",
        "pkg:npm/has-binary@0.1.7",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/object-component@0.0.3",
        "pkg:npm/parseuri@0.0.5",
        "pkg:npm/socket.io-parser@2.3.1",
        "pkg:npm/to-array@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/socket.io@1.6.0",
      "dependsOn": [
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io@1.8.0",
        "pkg:npm/has-binary@0.1.7",
        "pkg:npm/object-assign@4.1.0",
        "pkg:npm/socket.io-adapter@0.5.0",
        "pkg:npm/socket.io-client@1.6.0",
        "pkg:npm/socket.io-parser@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ua-parser-js@0.7.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.1",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-builtin-module@1.0.0",
      "dependsOn": [
        "pkg:npm/builtin-modules@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/semver@5.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-correct@1.0.2",
      "dependsOn": [
        "pkg:npm/spdx-license-ids@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-correct@1.0.2",
        "pkg:npm/spdx-expression-parse@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.4.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.5.0",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/semver@5.4.1",
        "pkg:npm/validate-npm-package-license@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/which-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@4.2.1",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@6.4.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/window-size@0.2.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-sync@2.18.13",
      "dependsOn": [
        "pkg:npm/browser-sync-client@2.5.1",
        "pkg:npm/browser-sync-ui@0.6.3",
        "pkg:npm/bs-recipes@1.3.4",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/connect@3.5.0",
        "pkg:npm/dev-ip@1.0.1",
        "pkg:npm/easy-extender@2.3.2",
        "pkg:npm/eazy-logger@3.0.2",
        "pkg:npm/emitter-steward@1.0.0",
        "pkg:npm/fs-extra@3.0.1",
        "pkg:npm/http-proxy@1.15.2",
        "pkg:npm/immutable@3.8.1",
        "pkg:npm/localtunnel@1.8.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/opn@4.0.2",
        "pkg:npm/portscanner@2.1.1",
        "pkg:npm/qs@6.2.1",
        "pkg:npm/resp-modifier@6.0.2",
        "pkg:npm/rx@4.1.0",
        "pkg:npm/serve-index@1.8.0",
        "pkg:npm/serve-static@1.12.2",
        "pkg:npm/server-destroy@1.0.1",
        "pkg:npm/socket.io-client@1.6.0",
        "pkg:npm/socket.io@1.6.0",
        "pkg:npm/ua-parser-js@0.7.12",
        "pkg:npm/yargs@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/connect-logger@0.0.1",
      "dependsOn": [
        "pkg:npm/moment@2.19.4"
      ]
    },
    {
      "ref": "pkg:npm/lite-server@2.2.0",
      "dependsOn": [
        "pkg:npm/browser-sync@2.18.13",
        "pkg:npm/connect-history-api-fallback@1.5.0",
        "pkg:npm/connect-logger@0.0.1",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/minimist@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/testapp@0.0.1",
      "dependsOn": [
        "pkg:npm/@angular/animations@5.0.0-beta.7",
        "pkg:npm/@angular/common@5.0.0-beta.7",
        "pkg:npm/@angular/compiler@5.0.0-beta.7",
        "pkg:npm/@angular/core@5.0.0-beta.7",
        "pkg:npm/@angular/http@5.0.0-beta.7",
        "pkg:npm/@angular/platform-browser-dynamic@5.0.0-beta.7",
        "pkg:npm/@angular/platform-browser@5.0.0-beta.7",
        "pkg:npm/@angular/router@5.0.0-beta.7",
        "pkg:npm/@angular/upgrade@5.0.0-beta.7",
        "pkg:npm/@types/angular@1.6.39",
        "pkg:npm/@types/core-js@0.9.43",
        "pkg:npm/@types/node@6.0.93",
        "pkg:npm/concurrently@2.2.0",
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/express@4.13.3",
        "pkg:npm/lite-server@2.2.0",
        "pkg:npm/reflect-metadata@0.1.3",
        "pkg:npm/rxjs@5.4.3",
        "pkg:npm/systemjs@0.19.27",
        "pkg:npm/typescript@2.6.2",
        "pkg:npm/zone.js@0.8.18"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/protractor@5.4.4-tuxcare.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-29T18:23:49Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'protractor' with version '5.4.4-tuxcare.2'. The application also has 2 child modules/components. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 4 source files."
    }
  ]
}