{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:14c260a7-2412-4888-8db4-5ba73bb5167e",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-30T10:51:06Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "protractor",
      "group": "",
      "version": "6.0.0-tuxcare.2",
      "description": "Webdriver E2E test wrapper for Angular.",
      "purl": "pkg:npm/protractor@6.0.0-tuxcare.2",
      "bom-ref": "pkg:npm/protractor@6.0.0-tuxcare.2",
      "author": "Julie Ralph <ju.ralph@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "protractor, webdriver-manager"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "format, install_testapp, prepublish, pretest, start, test, tsc, website, compile_to_es5"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "website",
          "version": "0.0.1",
          "purl": "pkg:npm/website@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/website@0.0.1"
        },
        {
          "group": "",
          "name": "testapp",
          "version": "0.0.1",
          "purl": "pkg:npm/testapp@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/testapp@0.0.1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/angular/protractor"
        },
        {
          "type": "vcs",
          "url": "git://github.com/angular/protractor.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@angular\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json\\ntestapp/package-lock.json\\nwebsite/bower.json\\nwebsite/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "protractor-site",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/protractor-site@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/protractor-site@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/bower.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/bower.json"
              }
            ],
            "concludedValue": "website/bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "blocking-proxy",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "284f0d14c66bde63761341dcbc2811b57ec38e188842bc257be9d2549542ff2a856fdfb1ce71e5d99728069d8bf6ace4238b78701149d5e7d717c0f08b5df644"
        }
      ],
      "purl": "pkg:npm/blocking-proxy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/blocking-proxy/-/blocking-proxy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blocking-proxy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/blocking-proxy/-/blocking-proxy-1.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "blocking-proxy,BPClient,blocking-proxy/BPClient"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/browser.js",
            "line": 11
          },
          {
            "location": "lib/browser.ts",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserstack",
      "version": "1.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bc54c4fae0ff4d38b86e2280f8627832c4151179f692751e107611bc97a1d9f55c6d53b8dcde6ea32ee7c5c0a03981a7fb7deb5f0764e74499ccc72a1bfa17a"
        }
      ],
      "purl": "pkg:npm/browserstack@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserstack/-/browserstack-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserstack@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserstack/-/browserstack-1.5.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "browserstack"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/driverProviders/browserStack.js",
            "line": 15
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 15
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-proxy-agent",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cf0934b52d6e756dcc8c61bc5420e3b81c43a5435ff5a9168559ccb1bf06aa512f5363cf1aa04b87518df792e021d5885555a0d084b66c9cf77e5cd01159995"
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "agent-base",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73e47f5395fedb3cf6f940ab085bfaa1d43325da2a23e61e72e8670092dad7361a31cd77ccf7f033066bafdd4f7750d8368ff23d16e23385957fdc2183016c22"
        }
      ],
      "purl": "pkg:npm/agent-base@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/agent-base/-/agent-base-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/agent-base/-/agent-base-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promisify",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5109d62f3e56ea967c4b63505aef08291c8a5203"
        }
      ],
      "purl": "pkg:npm/es6-promisify@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promisify/-/es6-promisify-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promisify@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promisify/-/es6-promisify-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "4.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd74d655260fae660b66f5e4b73ba96b38b62641a8360e37445ee3da1e567a46e56a82a69565f81809ea4420ab0bab075002b38fb42dd7cd12ea1867d3f0a41"
        }
      ],
      "purl": "pkg:npm/es6-promise@4.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@4.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de"
        }
      ],
      "purl": "pkg:npm/debug@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "535d045ce6b6363fa40117084629995e9df324c7"
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b4a14dc2007ebe562f104ff55637920daf3e1bd77d488658efe99e3d5b367fcb2f7bcfc8f6754c33de1a3145f96a10eeaa178e4b3c05c2b2f8dcb182a8d345e"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/glob/-/glob-7.2.3-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/glob/-/glob-7.2.3-tuxcare.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.5-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fca3df900349563664183de86de44a63a07b404498c012532aed73632399899a604c4baab4e85610ce324f1e13b1129c535b677141c73f3c32eb77a2192641d1"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimatch/-/minimatch-3.1.5-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimatch/-/minimatch-3.1.5-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.16-tuxcare.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13ddf0b9a169c894fa4185f51decf16e13deaecf5af3ed4268d3e093d179ce5fa185cc7e3eaccfb71747cb70e06a0fa6d7f088e12f6d1b3687bd09d92a6b8ea2"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.16-tuxcare.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/brace-expansion/-/brace-expansion-1.1.16-tuxcare.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.16-tuxcare.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/brace-expansion/-/brace-expansion-1.1.16-tuxcare.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine",
      "version": "3.99.0-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e007ad2b1dfdbdb4ff7f919d954ebec40f1d9c25362f3b48df3a45a554b17e2cd083d1c37d4220e6cf8b43002fb58d483fae399e0d229c5aa59101296b20b98"
        }
      ],
      "purl": "pkg:npm/jasmine@3.99.0-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jasmine/-/jasmine-3.99.0-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine@3.99.0-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jasmine/-/jasmine-3.99.0-tuxcare.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/jasmine.js",
            "line": 59
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 59
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/glob/-/glob-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/glob/-/glob-7.2.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5608d652c9e74fa9fe35493a799abbef37857695b62d60f33facc51ab09b1d789836e9790f3aa4d871d0e6e147d83356e576e9f3e8d5cda78db7de2cb04125e3"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimatch/-/minimatch-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimatch/-/minimatch-3.1.5.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-core",
      "version": "3.99.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eed5d9aea06719ec07f2ca73772ec7ebbb031bc4c00b3246be62d65e1a82ee0c4c925665403daa2790da01448c3f79cb6ef1bf6d550089360a786b8927a7eb6"
        }
      ],
      "purl": "pkg:npm/jasmine-core@3.99.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jasmine-core/-/jasmine-core-3.99.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-core@3.99.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jasmine-core/-/jasmine-core-3.99.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4582b9aec93a632a9147281c982feef240712dc5fe37c738952301843cf4f92c69f5653565a4bb42f21f65f58f6002652fdc441fa529493cd5467f5de56a2837"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.6.1-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.6.1-tuxcare.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "optimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/cli.js",
            "line": 4
          },
          {
            "location": "testapp/scripts/web-server.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10-tuxcare.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3a46bda8f7121ec7db0d96164e50e112fe5488f208b5052978d3d05275dab13467408a893597fb2378d203ee505780d139ba20cf9794df87c9b5d50a788494a"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10-tuxcare.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-0.0.10-tuxcare.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10-tuxcare.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-0.0.10-tuxcare.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6d300f74efe578426c55edd6d1bdbe3ff0c69100b2baabd01b89dde774c6276f2a3ca628ac0a678e355a95497a9003729a3f848bb796fbb9de84daca8ff1317"
        },
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/wordwrap/-/wordwrap-0.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "saucelabs",
      "version": "1.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e55f7146756bd87f84372c57c5592d50bcf8372060865b121cf1004574f4dba53267b7fbf5ec51d7615027ec2f2c1dfd72517a3673bc883348ac0ebc9f62d1d"
        }
      ],
      "purl": "pkg:npm/saucelabs@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/saucelabs/-/saucelabs-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/saucelabs@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/saucelabs/-/saucelabs-1.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "saucelabs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/driverProviders/sauce.js",
            "line": 19
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 15
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selenium-webdriver",
      "version": "4.0.0-alpha.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfcf2b7631c0bf78e64d9eca4865244efa38ac6cdc0c632ad285d61cd2032bde86b37d4929576ef7e14cb53e0a06b56889b83c75489c243a24e869eaaadb4ee5"
        }
      ],
      "purl": "pkg:npm/selenium-webdriver@4.0.0-alpha.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.0.0-alpha.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/selenium-webdriver@4.0.0-alpha.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.0.0-alpha.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "selenium-webdriver,selenium-webdriver/lib/command,Actions,selenium-webdriver/Actions,Browser,selenium-webdriver/Browser,Builder,selenium-webdriver/Builder,Button,selenium-webdriver/Button,Capabilities,selenium-webdriver/Capabilities,Capability,selenium-webdriver/Capability,error,selenium-webdriver/error,EventEmitter,selenium-webdriver/EventEmitter,FileDetector,selenium-webdriver/FileDetector,selenium-webdriver/Key,logging,selenium-webdriver/logging,promise,selenium-webdriver/promise,Session,selenium-webdriver/Session,until,selenium-webdriver/until,WebElement,selenium-webdriver/WebElement,WebElementPromise,selenium-webdriver/WebElementPromise,CommandName,selenium-webdriver/lib/command/CommandName"
        },
        {
          "name": "ImportedModules",
          "value": "selenium-webdriver,selenium-webdriver/lib/command,selenium-webdriver/http,selenium-webdriver/chrome,selenium-webdriver/firefox,selenium-webdriver/remote,selenium-webdriver/lib/session,selenium-webdriver/By,Navigation,selenium-webdriver/Navigation,WebDriver,selenium-webdriver/WebDriver,WebElement,selenium-webdriver/WebElement,WebElementPromise,selenium-webdriver/WebElementPromise,Command,selenium-webdriver/lib/command/Command,ICommandName,selenium-webdriver/lib/command/ICommandName,Session,selenium-webdriver/Session,Executor,selenium-webdriver/http/Executor,HttpClient,selenium-webdriver/http/HttpClient,Capabilities,selenium-webdriver/Capabilities,Driver,selenium-webdriver/chrome/Driver,ServiceBuilder,selenium-webdriver/chrome/ServiceBuilder,selenium-webdriver/firefox/Driver,selenium-webdriver/firefox/ServiceBuilder,SeleniumServer,selenium-webdriver/remote/SeleniumServer,error,selenium-webdriver/error,ByHash,selenium-webdriver/ByHash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/browser.js",
            "line": 12
          },
          {
            "location": "built/browser.js",
            "line": 13
          },
          {
            "location": "built/browser.js",
            "line": 15
          },
          {
            "location": "built/browser.js",
            "line": 32
          },
          {
            "location": "built/browser.js",
            "line": 33
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 16
          },
          {
            "location": "built/driverProviders/attachSession.js",
            "line": 17
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 17
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 18
          },
          {
            "location": "built/driverProviders/direct.js",
            "line": 19
          },
          {
            "location": "built/driverProviders/driverProvider.js",
            "line": 16
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 20
          },
          {
            "location": "built/element.js",
            "line": 11
          },
          {
            "location": "built/expectedConditions.js",
            "line": 11
          },
          {
            "location": "built/index.js",
            "line": 4
          },
          {
            "location": "built/index.js",
            "line": 37
          },
          {
            "location": "built/index.js",
            "line": 38
          },
          {
            "location": "built/index.js",
            "line": 39
          },
          {
            "location": "built/index.js",
            "line": 41
          },
          {
            "location": "built/locators.js",
            "line": 11
          },
          {
            "location": "built/ptor.js",
            "line": 3
          },
          {
            "location": "built/ptor.js",
            "line": 4
          },
          {
            "location": "built/ptor.js",
            "line": 5
          },
          {
            "location": "built/ptor.js",
            "line": 6
          },
          {
            "location": "built/ptor.js",
            "line": 7
          },
          {
            "location": "built/ptor.js",
            "line": 8
          },
          {
            "location": "built/util.js",
            "line": 12
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 2
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 3
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 6
          },
          {
            "location": "spec/dependencyTest/setup.js",
            "line": 9
          },
          {
            "location": "lib/browser.ts",
            "line": 2
          },
          {
            "location": "lib/browser.ts",
            "line": 3
          },
          {
            "location": "lib/browser.ts",
            "line": 6
          },
          {
            "location": "lib/browser.ts",
            "line": 31
          },
          {
            "location": "lib/browser.ts",
            "line": 32
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/attachSession.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/browserStack.ts",
            "line": 6
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 7
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 8
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 9
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 10
          },
          {
            "location": "lib/driverProviders/sauce.ts",
            "line": 7
          },
          {
            "location": "lib/element.ts",
            "line": 1
          },
          {
            "location": "lib/element.ts",
            "line": 367
          },
          {
            "location": "lib/element.ts",
            "line": 990
          },
          {
            "location": "lib/element.ts",
            "line": 1032
          },
          {
            "location": "lib/expectedConditions.ts",
            "line": 1
          },
          {
            "location": "lib/index.ts",
            "line": 9
          },
          {
            "location": "lib/index.ts",
            "line": 23
          },
          {
            "location": "lib/index.ts",
            "line": 24
          },
          {
            "location": "lib/index.ts",
            "line": 25
          },
          {
            "location": "lib/index.ts",
            "line": 28
          },
          {
            "location": "lib/locators.ts",
            "line": 1
          },
          {
            "location": "lib/locators.ts",
            "line": 135
          },
          {
            "location": "lib/locators.ts",
            "line": 167
          },
          {
            "location": "lib/locators.ts",
            "line": 196
          },
          {
            "location": "lib/locators.ts",
            "line": 221
          },
          {
            "location": "lib/locators.ts",
            "line": 246
          },
          {
            "location": "lib/locators.ts",
            "line": 260
          },
          {
            "location": "lib/locators.ts",
            "line": 270
          },
          {
            "location": "lib/locators.ts",
            "line": 282
          },
          {
            "location": "lib/locators.ts",
            "line": 298
          },
          {
            "location": "lib/locators.ts",
            "line": 310
          },
          {
            "location": "lib/locators.ts",
            "line": 423
          },
          {
            "location": "lib/locators.ts",
            "line": 457
          },
          {
            "location": "lib/locators.ts",
            "line": 489
          },
          {
            "location": "lib/ptor.ts",
            "line": 1
          },
          {
            "location": "lib/ptor.ts",
            "line": 2
          },
          {
            "location": "lib/ptor.ts",
            "line": 3
          },
          {
            "location": "lib/ptor.ts",
            "line": 4
          },
          {
            "location": "lib/ptor.ts",
            "line": 5
          },
          {
            "location": "lib/ptor.ts",
            "line": 6
          },
          {
            "location": "lib/util.ts",
            "line": 2
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 79
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 103
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "jszip",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e56f0d51a151151a9338bed90c3af1e6a587272057cbabde955b9d2334144a8a80018ab34a1d99eff9b445fd506e640971c7a00f4afe619c418f3aa806211e25"
        }
      ],
      "purl": "pkg:npm/jszip@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jszip/-/jszip-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jszip@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jszip/-/jszip-3.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fab83fbb0b2d8dc85fa636c4b9d34c75420c6d65"
        }
      ],
      "purl": "pkg:npm/core-js@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "010d5858423a5f118979665f46486a95c6ee2bb6"
        }
      ],
      "purl": "pkg:npm/es6-promise@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promise/-/es6-promise-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lie",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a436b2cc7746ca59de7a41fa469b3efb76bd87e"
        }
      ],
      "purl": "pkg:npm/lie@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lie/-/lie-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lie@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lie/-/lie-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "immediate",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9db1dbd0faf8de6fbe0f5dd5e56bb606280de69b"
        }
      ],
      "purl": "pkg:npm/immediate@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immediate@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc734ae6d5b8c7ca3998ef11b87669dd8770f627195f1d1100d00e33394ccf1ecb55784c2789a8dcc381a73c9deebffe454bbc0669dd3f8ecb5d3fafce3b5671"
        }
      ],
      "purl": "pkg:npm/pako@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f90341e68a53ccc928788dacfcd11b36eb9b78e"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96800093cbf1a0c86bd95b4625467535c29dfa04"
        }
      ],
      "purl": "pkg:npm/rimraf@2.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.30",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72419d4a8be7d6ce75148fd8b324e593a711c2ed"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.30",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.30.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.30",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.30.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274"
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.4.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ac66725924e88947dc1628ccaebd2135cba0eae4b0ae25a9ea871b251f66f133a76e6a1359f8732908b8414066646d7eb145ff31d58d9e26582ddaadeaa38f5"
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.19.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "9.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "519cb4ca686d005a8420d3496f3f0caeecca580f"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@9.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-9.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@9.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-9.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.4.18",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6bcb4fc9ab13cb17d9ce8ef4ad6bbb55a277643f97708322c38d5a323039668ee813da5459d4e7ecad84e409dda19039c94ca45b3bf465de8ae6f2f96c5336c"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.4.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.4.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "source-map-support"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/runner.js",
            "line": 167
          },
          {
            "location": "lib/runner.ts",
            "line": 183
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webdriver-manager",
      "version": "13.0.0-tuxcare.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95ce635bbd6d5e2da2027aae835110adeb5f3229a1ed46cc0c6a7a8104633f9f5a557581900d4120412d587841d39127e329d3adb7163a98e861f45dfbcc4e21"
        }
      ],
      "purl": "pkg:npm/webdriver-manager@13.0.0-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/webdriver-manager/-/webdriver-manager-13.0.0-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webdriver-manager@13.0.0-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/webdriver-manager/-/webdriver-manager-13.0.0-tuxcare.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "webdriver-manager,ChromeDriver,webdriver-manager/ChromeDriver,GeckoDriver,webdriver-manager/GeckoDriver,SeleniumServer,webdriver-manager/SeleniumServer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/driverProviders/direct.js",
            "line": 20
          },
          {
            "location": "built/driverProviders/local.js",
            "line": 21
          },
          {
            "location": "lib/driverProviders/direct.ts",
            "line": 11
          },
          {
            "location": "lib/driverProviders/local.ts",
            "line": 11
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "adm-zip",
      "version": "0.4.16-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa0b40dba3e237831234e31bc6f5d3eb4be3afd124f06396fc717db6a5b09b234d6d4a262245e9e24ff1ae2c95dbb221b0b33320726146d8412ba25f0fd539d6"
        }
      ],
      "purl": "pkg:npm/adm-zip@0.4.16-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/adm-zip/-/adm-zip-0.4.16-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/adm-zip@0.4.16-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/adm-zip/-/adm-zip-0.4.16-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loglevel",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e03260aa2094802aaa3af25d2b4b601a9c459f931699e703621056f98209b4f250ecf579762b10655f73d371a0f672104cd605c061fe3dd7f33646ff09c1aca"
        }
      ],
      "purl": "pkg:npm/loglevel@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/loglevel/-/loglevel-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loglevel@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/loglevel/-/loglevel-1.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.2-tuxcare.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74d925b7c0b9951a0e6cf82e224d79323d3fd96e3ff6809c12a2f3d59afb60ec05468e4a9096008e2719297d509d5146ac074366e2d8f8a5e4121cd320ac4f73"
        }
      ],
      "purl": "pkg:npm/request@2.88.2-tuxcare.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/request/-/request-2.88.2-tuxcare.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.2-tuxcare.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/request/-/request-2.88.2-tuxcare.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3c91c1aa9d87ff6268e84617f1caef822f106352d1cb5cb5d7fef51fc7d9762d8cc6ddcd66eb59eba72154648eb3792f8b8bfc1630c89d0fd2a0aeab46ab798"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9477badb3bdb4c1e5e100054562fc0c1587464a63dacc3038669be79ecaeb9441b437f89f9f38d550399ca3f8376bbc3e01637dee6278b2449e142486922807f"
        }
      ],
      "purl": "pkg:npm/aws4@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws4/-/aws4-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/aws4/-/aws4-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2d605ca27da15f19a72888e6e325e828964c12538c503466d581488d6155316d0db1da552c16f638855815cc68887ba58b38fab27165c0e3497e3d6b31b6153"
        },
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/caseless/-/caseless-0.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        },
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f428b60f866eb379a738973de8277a3ae6abe040270fb9b8b2a2d66b5ea11a1b884d6a03583bca9d954ad7e6fc2abfda21a9e4ff6778fafb25b4ebbc9659d53"
        },
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/forever-agent/-/forever-agent-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3-tuxcare.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef869cd1695e8e332122dc06462472315bd7274589086c7e726b783a9afdd6686accf617f83710464eec7e149792b68dbff6589cff5acf8efc2e817d069ecb90"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3-tuxcare.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/form-data/-/form-data-2.3.3-tuxcare.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3-tuxcare.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/form-data/-/form-data-2.3.3-tuxcare.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        },
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e64f64f49658dbc5d4197eca6c9e8f6182b1b7522afa2ace5a7e2b26eb6a68c6a04ceac0e7304b8f9b34eaf17374384c2a28b2dd8758d0237ab213ae8dcdbdf"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e0171ec77e8abad32b4ad9cec386717c8c8bf362038cc5fba08cb3923078cb20f81e9ea6bb4bba1a6a001352af7d995e8862f376b51982d309d3617ea23db33"
        }
      ],
      "purl": "pkg:npm/ajv@6.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ajv/-/ajv-6.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ajv/-/ajv-6.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16"
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/punycode/-/punycode-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/punycode/-/punycode-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa96ecface1197f1cc9169342514c3f0f346d22551b6c7f7056fc64f85420b1a01e46bd4aca24082390829bde78f7abaa27593ab4f5e22a6a7c96fb20b716e5"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0806e7afa473e0261090b614b52357c503d41f680af1fde259ec5596c9cc783f868e5b10d17b32d5c397fa637776dc58a26472db50a23b353c521c3a3b09dc11"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35f27853304271018b0e542aee71f11feb6fde4c99d211d0a85e413ba27bb4d25e3f9768d6594fafc759f331e89df840bb43c701d3244a8fbca34c3183d9595b"
        },
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assert-plus/-/assert-plus-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f66d238c01cfdc88bcfa0f38235651893fdf81ac95aee540c62bbd02da2c1e0b940121e15fd195d1bc68c48f6b9882b63632400086c4961c35a516d12ba195b"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsprim/-/jsprim-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsprim/-/jsprim-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7535dcfb36ffa6bc00b58f492d4daedf01bd2f2f21865feacc1cd05842f8900c65341f0ee585cb4900da9b3e1bbd9d5f7f8b34ff227b53819ec89bff4b26cf6"
        },
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/extsprintf/-/extsprintf-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7acf783379d321fb043e2b1169f6a4f870cb7c75e7281855def5397aa3dc4b77e5216a9cc495a05c75e27b2dd8ae968db1a9d8e5e8b55686046cece28eeabd04"
        }
      ],
      "purl": "pkg:npm/json-schema@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65929298300414e8a311104b92661f27ebe6937c3eee138b603364442b91b8c246126a9834234bc81045c162953217f068417758e774665c3ce94fd60bffa763"
        },
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/verror/-/verror-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/verror/-/verror-1.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da9d8a2594d2a90fc8dfe1d7e3612960e6b69777fc12bbfc3162accb623db9fe3003bc852245d17df61db31f3acbacf8bc7b55f2eee0fa93e5afcff8a2e031b1"
        }
      ],
      "purl": "pkg:npm/sshpk@1.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/sshpk/-/sshpk-1.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/sshpk/-/sshpk-1.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b1fc5c4f9f43038dec89ee2ff2a07185b7f117e8bc8d6f148484f3d73833cbf8a07454f93ce9461f2f494c772f8a0a7bfe7e6bc8cf24b068ae423b0a956d64d"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asn1/-/asn1-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/asn1/-/asn1-0.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9e1485ed3f8312a22e8d2ea3b5d967ea011596b822a2d919fff6124b126b41e724cdafd0ea1569094427f6a92856ccf7803119ce802aead2c83f28bbf9112f7"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2975c515d01b15763881e148c28c8d2be7f96756fbb307d70017cbec75c29a821630a5377664b6ebaef603811e42d0f32cacbb49799f06ee7526896f10ac2d18"
        },
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tweetnacl/-/tweetnacl-0.14.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1162f140c6a3a8fea1d6621298dacd9696a846a5df0fdb6ac163407404c15b592460e9c5b1f531e625bb0092f17ab9c262c9a280e5320bd56ab9967c6338e2"
        },
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/dashdash/-/dashdash-1.14.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a1f4efa1c111cd6c6e012d38c49779f0d38e029069b95fa2e86827fb2cfa7b514f10aede3b258362ea73d7f318d6f7b4ca18a9b5a2e72d834412a597bdaab9f"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51553d7626ead897055b140f03a282aa3e4ee3654e980637cd051f10ac54d0aa53197c0da028e45f57b5dde1cdbf0ff13f29edea9534ad9d61b63593353497b2"
        },
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jsbn/-/jsbn-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1fce3f49c4e2df27e5c62e147ccdedee9cdd0a642819c224920f3d7af151118caf1697c91549d72eda4b29778b38c2d01ad72feaad5462000d1672556cbb49e"
        },
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/getpass/-/getpass-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
        },
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-typedarray/-/is-typedarray-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6258f3edf7f23dbacba4b9e0accb59ecd76e52056f8bac06f5127d21473209de7d610f75d4f049a6138351c6ce55ba987f17b5c2e61ffcb27c3dab8c470b0cfe"
        },
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/isstream/-/isstream-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        },
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec40079722c7239e9510874ae7bbb01dd1ca21a0066e75cf8b0d3259b6ab41938a68aa6f508816d2359154b89ab6733e5d7952c2c6a72011ff87318c26e94ca3"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.5-tuxcare.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1014835a0f1be0616d1eeaa62f3efde3c88145a64e87f54ba4d80a152b171ad49ba82964ef7b6910960c7e0dc3080c0661bfd8f149ec0a2fd54cd5c3936762f8"
        }
      ],
      "purl": "pkg:npm/qs@6.5.5-tuxcare.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/qs/-/qs-6.5.5-tuxcare.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.5-tuxcare.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/qs/-/qs-6.5.5-tuxcare.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.5.0-tuxcare.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5df190bed58a350f6ad16f2831d6e5079e20c35eb8ced8e4cf9939d026d4e4374cc538e9bde74bd6442d09d4b137f1f018bbcae8aa2a7c221ce85db779ae08d4"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tough-cookie/-/tough-cookie-2.5.0-tuxcare.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tough-cookie/-/tough-cookie-2.5.0-tuxcare.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25977780c5410154244ace8774d668f52768d0b35c41e30d3f70a8cc125bdc9602fd05186539cac4ff9ff285915f8ac73f912ead6c6a0074d2c140a394d29ad7"
        }
      ],
      "purl": "pkg:npm/psl@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/psl/-/psl-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/psl/-/psl-1.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        },
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.4.0-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b03584c6f56a073c74a02378b2941eec1110051a9d51daf23041da9219f2a14dd2e3f5e261de7e78314597f7e361217d590ba44092883869c8c10b49b874938"
        }
      ],
      "purl": "pkg:npm/uuid@3.4.0-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uuid/-/uuid-3.4.0-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.4.0-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uuid/-/uuid-3.4.0-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
        }
      ],
      "purl": "pkg:npm/semver@5.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/semver/-/semver-5.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/semver/-/semver-5.7.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar",
      "version": "4.4.19-tuxcare.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4089506c62839b68346d8c7c214c5c95dd408ce04e20082c612979de23ecf3e18544b680a7587947ca897777524aacb2530b2c920e0eba62624d9aad21ba73c5"
        }
      ],
      "purl": "pkg:npm/tar@4.4.19-tuxcare.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tar/-/tar-4.4.19-tuxcare.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar@4.4.19-tuxcare.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/tar/-/tar-4.4.19-tuxcare.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chownr",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c9d1bab36b296626d567360cd37923acf033dabe96d8804aff6f460bf3fd863b7c4912122716684a3149c42508d9ba62bb297185854cbcf4faec25695a90156"
        }
      ],
      "purl": "pkg:npm/chownr@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/chownr/-/chownr-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chownr@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/chownr/-/chownr-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-minipass",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "196492246172e1ef4651e09c6c89040fe6e00281728fb5c5d6657cae66b7416e0d22a5fd2b2c7bf4dfcf17ad47e6e74e577698d4868c2ecea919b1fbd679424c"
        }
      ],
      "purl": "pkg:npm/fs-minipass@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fs-minipass/-/fs-minipass-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/fs-minipass/-/fs-minipass-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c317d48e0f5679b1fe0940d7fc275b4658794a67d98b2fe1a64c5a448d7a63d5b9e8f6bbe6c5a077faef16295282b6ae0fd37217298fffe2455772b0cc8b097a"
        }
      ],
      "purl": "pkg:npm/minipass@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minipass/-/minipass-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minipass/-/minipass-2.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b850641a58f1f9f663975189c01b67b09dc412e22e05e374efdc9a0033eb365430264bd36c2bc1a90cc2eb0873e4b054fb8772ba4cea14367da96fb4685f1e2"
        }
      ],
      "purl": "pkg:npm/yallist@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/yallist/-/yallist-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/yallist/-/yallist-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jackspeak",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1877864e69ee6879ef4be65cb51074d5b7f1011baef705bcdc435bba2c1ebb4ed215c56566b26972c852adefe47864fb6060612c783ffab5c2352aec107294e1"
        }
      ],
      "purl": "pkg:npm/jackspeak@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jackspeak/-/jackspeak-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/jackspeak/-/jackspeak-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39c444ebc70eb15317a7562fa2797f7f39103b28cb4aeffc6e13c37d0b747b4fc46f6f374ca3f6d05b3632aa0fb2bf52c00e7de6b44203e40ccd873d9c13fe25"
        }
      ],
      "purl": "pkg:npm/cliui@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/string-width/-/string-width-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/string-width/-/string-width-4.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/strip-ansi/-/strip-ansi-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/strip-ansi/-/strip-ansi-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ansi-regex/-/ansi-regex-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ansi-regex/-/ansi-regex-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minizlib",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9960c3849e656c7427932551345bd643fa956713c87d1e66bf88ec30443b1d42878fa685f9ebff01eb3dcff55370a6926e04a351b850d1351a9159ec53f46f5"
        }
      ],
      "purl": "pkg:npm/minizlib@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minizlib/-/minizlib-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minizlib@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minizlib/-/minizlib-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mkdirp/-/mkdirp-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/mkdirp/-/mkdirp-0.5.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-1.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.4.23-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf0cf27bf35d05fc211a152b019924b2cc7c3e8692c71559ba94690ffaa5e7788e6887c962c97439fefbc43b4d203e0f5790e51ca304c434a4669078588d7aba"
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.23-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xml2js/-/xml2js-0.4.23-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.23-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xml2js/-/xml2js-0.4.23-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "11.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c396c23f905131ee02ef6de71cd3fa212c6e747ee810a7caf21f3313b96f6f49ad462745d858a9e1b14c7ba227b71bdf3eaf9e9a4d0214078921b78d91dc9bc"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@11.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@11.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "12.0.5-tuxcare.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b445f6235977555bd4ebf58abb8289b08bc0c7f41ffc0689a869d908249dc1f8c559f04e5178e1758c90a94c7d35ce85cfeeb50c035172ea03a60f5b09df28f9"
        }
      ],
      "purl": "pkg:npm/yargs@12.0.5-tuxcare.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/yargs/-/yargs-12.0.5-tuxcare.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@12.0.5-tuxcare.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/yargs/-/yargs-12.0.5-tuxcare.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e051be4521bd0cbeee130454657667dd24b7e038833dfccfd153a2130b545a513e011d84220fa14b2beb2205147e176047f52401e5b640781e3fe856ad7b3b8d"
        }
      ],
      "purl": "pkg:npm/cliui@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8479022eb1ac368a871389b635262c505ee368f"
        }
      ],
      "purl": "pkg:npm/strip-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed0317c322064f79466c02966bddb605ab37d998"
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296"
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4"
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549"
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e5e6ce76948e5a84a09eae7cf323200fd100196c6228bed5471b0a5cbb526bfc4a732d50c8da6c88487c06a8aee6f2e405ba05564ab6f11fb5e7846b6f11cf8"
        }
      ],
      "purl": "pkg:npm/p-limit@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84ca74a270ca21a8c77c891d464dcfe02742984ae4600c710ed3f75b1ff89d9dda1a56aed952a1de666972e1641f6ed64242ffdd60423ce92dcc0f593809cc41"
        }
      ],
      "purl": "pkg:npm/p-try@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dedeab553a1ea197d848677c6282c54760c992242b22252b19c8ef157da60f0ddb9fa9363adc073744cd08b6c13bec3ca93be29a10e4bfe2d2b1c6c9635bc4eb"
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee0e5eedd9973edcdc3f86e0b19f22c4356a03ba1662e133e25392ba3796ca588f6a2e207d50e2148730060dda1823e799219fcce2932b771c3e7d022afdc307"
        }
      ],
      "purl": "pkg:npm/os-locale@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed738c9f3f189f1d601a8ff787257d96860d3d633de231b7fb74f763cb6c7d2b2d166113984342314fc0ff38fc2f26a3d6592011ea4a7a9bddeb6e34b4146f97"
        }
      ],
      "purl": "pkg:npm/execa@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "6.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79354bac14adedf8db0f2833f34e69327b2d22cd954c1364466d2ac5977e33b0395c377155158ee4cc460576618d8e1ca8b60b76dac6a917fc9813e6cf04a959"
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nice-try",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d67878e5d79e6f9a25358ede5fcd8190f3bb492c51e524982623d3ad3745515630025f0228c03937d3e34d89078918e2b15731710d475dd2e1c76ab1c49ccb35"
        }
      ],
      "purl": "pkg:npm/nice-try@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nice-try@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "411cadb574c5a140d3a4b1910d40d80cc9f40b40"
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e12277766d160305b2fcd55e8a8661e409ed91d26858ac47c5c9b23fadb67ce9201dae33dd1d137412480883726920c4eae37055cf2066bf998a7c19007e3120"
        }
      ],
      "purl": "pkg:npm/semver@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44aac65b695b03398968c39f363fee5deafdf1ea"
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da42f49740c0b42db2ca9728571cb190c98efea3"
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c269a2975a993b98e5db82fca9d34cd06b68f2b9e18c297a73f8973c54f07f751ae756a45bf7f2ed022a37251355a2d841f6103cf92d170770a6c2233a86ca"
        }
      ],
      "purl": "pkg:npm/which@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e943d1358dc37555054ecbe2edb05aa174ede14"
        }
      ],
      "purl": "pkg:npm/get-stream@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae"
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-eof",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb43ff5598a6eb05d89b59fcd129c983313606bf"
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-eof@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af3c46fc3fc1069f05ca0a5c2c35482bc958e595c46ab4c61ae3d353b1b41a818b93d437179e5d7dd79a315a3a321ab5d1eb31ff63465cf7ac56b0f7280ca78"
        }
      ],
      "purl": "pkg:npm/lcid@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0f56fff2fd043f5228ab8ffbe1de83fed56c3e0167a19a2d60e5f15618f17a22908108356b8601d132facb7dd61cc038774096c65c35b8240bb3c4494b4aa28"
        }
      ],
      "purl": "pkg:npm/invert-kv@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "590c46ff9c58737b4c6d82d7a173e6f35113d960d42e25391716ee22835b26a2ce388f337a15c5759ba250481f76b536995075a710595069583914aba6e26b78"
        }
      ],
      "purl": "pkg:npm/mem@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem/-/mem-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem/-/mem-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-age-cleaner",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c9cf1ea73283fa3c32cf0459a0efec5129e159bc56e832b1a5c66363f4296f5f9dcaae6bcce5b5c55c45a36f3e1ccf50059fe8d627dcff0c94b3ee1aecd30df"
        }
      ],
      "purl": "pkg:npm/map-age-cleaner@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-age-cleaner@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-defer",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f6eb182f6c9aa8cd743004a7d4f96b196b0fb0c"
        }
      ],
      "purl": "pkg:npm/p-defer@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-defer/-/p-defer-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-defer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-defer/-/p-defer-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8dff38bb1cf08ae88854a88e2e97d893b378e934b2f2e6d3a279a7798f6fae91cd027a74401b76071595f5d3b7fe3f81a1501bf9ae46e980cf5b73391ce74c59"
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-is-promise",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c9456989e9f6588017b0434d56097675c3da05e"
        }
      ],
      "purl": "pkg:npm/p-is-promise@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/p-is-promise/-/p-is-promise-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-is-promise@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/p-is-promise/-/p-is-promise-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afd4bf6725eefd7bbdab5b58969b0b22c6b711e2d75e4d15c25c6a4dc1517e0f4484c5bed7b91bb7d1b436b8029a119be6f4f687284964b7c31b1fbbfb9523ff"
        }
      ],
      "purl": "pkg:npm/y18n@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "11.1.1-tuxcare.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fc7783d74f040d26595f9af9598e17979d0e890c77862a0638c2fb7cf3decb76d1d4e301a42055bb69c09cabc6682a797842759bd3dc6c61bcd0f0529dc27ac"
        }
      ],
      "purl": "pkg:npm/yargs-parser@11.1.1-tuxcare.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/yargs-parser/-/yargs-parser-11.1.1-tuxcare.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@11.1.1-tuxcare.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/yargs-parser/-/yargs-parser-11.1.1-tuxcare.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "chalk",
      "version": "0.4.31",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a31d74241a6b1edbb973cf36d97a2896834a51f9"
        }
      ],
      "purl": "pkg:npm/%40types/chalk@0.4.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/chalk/-/chalk-0.4.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/chalk@0.4.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/chalk/-/chalk-0.4.31.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "glob",
      "version": "5.0.35",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1cf95bdeb3330bc8c585bd72e49688b14f89f485aad42156639e9cf3b5a6749ca2eeba5ed9df688cb767d414601a678cb55d68c544cb422397b0bf28786887a"
        }
      ],
      "purl": "pkg:npm/%40types/glob@5.0.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/glob/-/glob-5.0.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/glob@5.0.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/glob/-/glob-5.0.35.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "events",
      "version": "1.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76d1f7c9b360ea34a4066e88b6ab8be710ca22a4dd45d1b93e3987546385f782cea923695b1f64935ac5d82d93bff7b733a6d68ccb4ea12a30fdd56c8e3c8f"
        }
      ],
      "purl": "pkg:npm/%40types/events@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/events/-/events-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/events@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/events/-/events-1.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/events"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "2.0.29",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5002e14f75e2d71e564281df0431c8c1b4a2a36a"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@2.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-2.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@2.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-2.0.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "6.0.96",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ec38e63ab4c4378c2076c03e755c50e69a9826e3054a90910275c551a9aa5b2446bb6b024372bf92687f2da33fb8af8296f1843733bc9b5cca120e8d5019ec0"
        }
      ],
      "purl": "pkg:npm/%40types/node@6.0.96",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-6.0.96.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@6.0.96",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-6.0.96.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "jasmine",
      "version": "3.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e78dd2f990897cde23296cd1929b5b26a4d8daf73887bfa53d5a94da15dbd571687c3714c4d00d02299d64f61a1faff285ecd502c35eba3a198c0154d3a6df98"
        }
      ],
      "purl": "pkg:npm/%40types/jasmine@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/jasmine/-/jasmine-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/jasmine@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/jasmine/-/jasmine-3.3.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "loglevel",
      "version": "1.5.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f3cc8662855fb2f64c52839c49324c8891aa069178b9d22b194ed18739b34746a000c2318d8d208d3c8ec0500bf4b5950a4eaf5fd9c76409477fd89559513ac"
        }
      ],
      "purl": "pkg:npm/%40types/loglevel@1.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/loglevel/-/loglevel-1.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/loglevel@1.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/loglevel/-/loglevel-1.5.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/loglevel"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "69a23a3ad29caf0097f06eda59b361ee2f0639f6"
        }
      ],
      "purl": "pkg:npm/%40types/minimist@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimist/-/minimist-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/minimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "optimist",
      "version": "0.0.29",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8873580b3a84b69ac1e687323b15fbbeb90479a"
        }
      ],
      "purl": "pkg:npm/%40types/optimist@0.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/optimist/-/optimist-0.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/optimist@0.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/optimist/-/optimist-0.0.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/optimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yargs",
      "version": "12.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5158e8da81fbf5a44d72c0e51659d0fe227aec977b8fab9283b8d424ffd167f9d48c08791259a7c250f92bfe9e1a01132548021e48969fdd41f098d743ab9b03"
        }
      ],
      "purl": "pkg:npm/%40types/yargs@12.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yargs/-/yargs-12.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yargs@12.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yargs/-/yargs-12.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.18.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b292198ffdd553b3a0f20ded0592b956955c8b4"
        }
      ],
      "purl": "pkg:npm/body-parser@1.18.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.18.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.18.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.18.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 4
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d32815404d689699f85a4ea4fa8755dd13a96048"
        }
      ],
      "purl": "pkg:npm/bytes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bcd52e14c097763e749b274c4346ed2e560b5a9"
        }
      ],
      "purl": "pkg:npm/depd@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b55680bb4be283a0b5bf4ea2e38580be1d9320d"
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06f13f4f0a595f8157131c4ec59c9119042feb9d4c4b09962991aabe63dc4488c3a96b9bebb9132ae20cc78ddc659ad2fdc041cf005c3435a8171b765c4148a5"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "161c7dac177659fd9811f43771fa99381478628c"
        }
      ],
      "purl": "pkg:npm/statuses@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dec9351516d6a18dfd260777594fbeeefbc3b4401f3d8c57670647793f526060f6cf6a26b78175ce54bd9fabc57253680c303ed268ded0ba44c1fe999762f0c"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.23.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f1336481b083cd75337992a16971aa2d906947"
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318"
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5eb22125bf506b668237ac20ee3ae2820516ee0291866833d07e349f946c5dcb8a32cea821c6eea4944924548bc18def85174057f5ca04bfc2aa5ba5ffee78f"
        }
      ],
      "purl": "pkg:npm/raw-body@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d1915bffe6a6361ba23c89a6fd708eefd5b3887619bde1d5634023c51255bd5bedc67833921e6cb610161ee154c0a6ece894f7268054cdddfb55251291d89f5"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8710d7af0aa626f8fffa1ce00168545263255748"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.22",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68697a4d91a7866fe58ba17bcb1f366c988167082211ae077fa08dafc60efabe541ebe77b524d865bd74db3c94e740ce59629e3afd2e40b44bd3ff4488a582a2"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.22",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.22.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.22.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.38.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ea562a0c145cdcd9ac1c749648cd1dc78d9157db44218a5552ee1cad90aaefef11409fc6ccd60cdcfc5397d9ac0b212bd67b43d5f29b4529ca27fb0679a9892"
        }
      ],
      "purl": "pkg:npm/mime-db@1.38.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.38.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.38.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.38.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d02637b067fe958bdbfdd3a40ec56fef7373247"
        }
      ],
      "purl": "pkg:npm/chai@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai/-/chai-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai/-/chai-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "13ca515d86206da0bac66e834dd397d87581094c"
        }
      ],
      "purl": "pkg:npm/assertion-error@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-eql",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef558acab8de25206cd713906d74e56930eb69f2"
        }
      ],
      "purl": "pkg:npm/deep-eql@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-eql/-/deep-eql-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-eql/-/deep-eql-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ba5ec2a885640e470ea4e8505971900dac58822"
        }
      ],
      "purl": "pkg:npm/type-detect@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "762217cc06db258ec48908a1298e8b95121e8ea2"
        }
      ],
      "purl": "pkg:npm/type-detect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai-as-promised",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09d7a402908aa70dfdbead53e5853fc79d3ef21c"
        }
      ],
      "purl": "pkg:npm/chai-as-promised@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai-as-promised/-/chai-as-promised-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai-as-promised@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai-as-promised/-/chai-as-promised-5.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clang-format",
      "version": "1.0.49",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf52f42277d41ed3618591f87145acf64aceb7e6"
        }
      ],
      "purl": "pkg:npm/clang-format@1.0.49",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clang-format/-/clang-format-1.0.49.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clang-format@1.0.49",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clang-format/-/clang-format-1.0.49.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "clang-format"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.5.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
        }
      ],
      "purl": "pkg:npm/async@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "860a121ab737a63cc03c734183e2a715c2b61f09474ecfd8ac0194afaaa04d5519997bf55045d79746d934128c03d7ee77a95160574f1b3d315f1c9c3f39a68b"
        }
      ],
      "purl": "pkg:npm/resolve@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expect.js",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0a59a0d2eff5437544ebf0ceaa6015841d09b5b"
        }
      ],
      "purl": "pkg:npm/expect.js@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expect.js/-/expect.js-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expect.js@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expect.js/-/expect.js-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "express",
      "version": "4.16.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f5d94bb26f814caddfea4009bab821c090fb4ef050d34496410dde43d8a38bd9e2dacf5c9435d501fcd388caad22538ab87056abb140ab9c50cf05c9e4b2e3a"
        }
      ],
      "purl": "pkg:npm/express@4.16.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.16.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.16.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.16.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb777df6011723a3b14e8a72c0805c8e86746bd2"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b327184e8992101177b28563fb5e7102acd0ca9"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
        }
      ],
      "purl": "pkg:npm/cookie@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ae2eeb65efa62268aebfea83ac7d79299b0887"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6351940e8dfd7b3e1a1c0c3b332b27503e49cd85fe59a223f08e7b90edda10f4f57c544be2cafb9a37a2f7b1609f0840cb2cd16264196931dbdbef6e67574fb6"
        }
      ],
      "purl": "pkg:npm/finalhandler@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc289d4ed8993119460c156253262cdc8de65bf3"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce1482b6df2fd8d0eb4653d0a4236dc3f85e64bb5f503ab104cd6e76a8a46ff1db939d8b2b89d04b0af5d2eefb8a8a425b92ecc87a6e5d2d069c4738f262de7b"
        }
      ],
      "purl": "pkg:npm/statuses@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8cadd90d976569fa835ab1f8e4b23a105605a7"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5529a4d67654134edcc5266656835b0f851afcee"
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df604178005f522f15eb4490e7247a1bfaa67f8c"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5eae2a3687d8e9e421c6c1cc9b9b1995a879a708165e7b095f274a5ec7e516ed09f2ece3995d3b47e7a4c6372062ce48223b0849b4c2ab5730d378a732499c0"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98c23dab1175657b8c0573e8ceccd91b0ff18c84"
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaa33d6ddd7ace8f7f6fe0c9ca0440e706738b1e"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f49be6b487894ddc40dcc94a322f611092e00d5e"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.16.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13ae1814f52cb051c4141be96db8ebe383422ed23502887143c6528898d02ec90074abab89810fe95c8612c4431fc49ca331a991a5f5046be16a7a82c2470467"
        }
      ],
      "purl": "pkg:npm/send@0.16.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.16.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.16.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "978857442c44749e4206613e37946205826abd80"
        }
      ],
      "purl": "pkg:npm/destroy@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "288d7ea8e66ee43716eb06b26074b347fb572820c2e4e9b8b35cf64098c350bccb7267f70efcd2ee896e6381c24eb73ef4588a99652078d2e0ed6dee210bf1b5"
        }
      ],
      "purl": "pkg:npm/mime@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7fb5d26b3b8537f3b47da0c8dbd688fba9231a31f98ec9de23f61385a3165ed9b690b338077125a3bb26bf0a24f9920659291b9d1cd380d296173a5f2b4399f"
        }
      ],
      "purl": "pkg:npm/serve-static@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f95710f50a267947b2ccc124741c1028427e713"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2299f02c6ded30d4a5961b0b9f74524a18f634fc"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95766c601dade4a77ed3e7b2b6dc03881b596366"
        }
      ],
      "purl": "pkg:npm/gulp@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp/-/gulp-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp/-/gulp-4.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 3
          },
          {
            "location": "website/gulpfile.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-watcher",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2d5ac50b3443c7290d8c478cd7bb34a6a9b7725793edc3009a592190d56c07b09d3b8a535e375241f27b7185c91b9e948769ff5d5c5507cc85af9b5235dddb2"
        }
      ],
      "purl": "pkg:npm/glob-watcher@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-watcher@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-5.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6d78eb105800571c70453fdcb7b244b93f777f59f597a6fdc5529cbe2e8accacd61a4fda48e282cc417ee3cd0d8a9253691a9587cdd0974c34f66375c695907"
        }
      ],
      "purl": "pkg:npm/anymatch@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "3.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3168a4825f67f4cdf0f9ba6c6371def0bfb0f5e17ddf7f31465f0800ee6f8838b3c12cf3885132533a36c6bae5a01eb80036d37fcb80f2f46aaadb434ce99c72"
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6461074febfec71e7e15235761a329a5dc7c520"
        }
      ],
      "purl": "pkg:npm/arr-diff@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
        }
      ],
      "purl": "pkg:npm/array-unique@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68d75b9e3f4ff0f8dd5d4e326da58b2b6205de373f1280d86c2ec06b35bab68dd346c7d7c6c702f545ce07988388442b93221b5a9d922d075ae3e4006bb9dcdf"
        }
      ],
      "purl": "pkg:npm/braces@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
        }
      ],
      "purl": "pkg:npm/extend-shallow@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d544811d428f98eb06a63dc402d2403c328c38f7"
        }
      ],
      "purl": "pkg:npm/fill-range@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c80c17b9dfebe599e27367e0d4dd5590141db38"
        }
      ],
      "purl": "pkg:npm/to-regex-range@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a11aad199d5e66e57b592cc6febcfefa91c00ce6790baa4d25a6a02ea2348a1a042d9f87918b86591a6da8968db32851feb0cb166aa3825b576a0273abbbbda"
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc8e9d637fc021d355738cc2f4afdba77e928e6f5a52030face8509ecb5bcbe1f99042f107658ef7913fe72b36bb41c22a04516cbfe1d32d6c18c0e22a0d96"
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base",
      "version": "0.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e53e8fe313e0a69d180c5bd25b0119e0da04dda3384014170f39956eb6829058fccc733e99b6bc4b2a81e436d95b247b9981e8e98ec1750a373280389b44de42"
        }
      ],
      "purl": "pkg:npm/base@0.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cache-base",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00a71d4e71525804dde7f1823d1c6bd82870209f3909ecab1328d11e52b1439e9de1724c1b29b4b8088a9f4c5b2ce18e977fb24693938b8f38755084739014cd"
        }
      ],
      "purl": "pkg:npm/cache-base@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-base@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collection-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4bc0373c164bc3291b4d368c829cf1a80a59dca0"
        }
      ],
      "purl": "pkg:npm/collection-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collection-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
        }
      ],
      "purl": "pkg:npm/map-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-visit",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f79c4493af0c5377b59fe39d395e41042dd045bb"
        }
      ],
      "purl": "pkg:npm/object-visit@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-visit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "137918d6d78283f7df7a6b7c5a63e140e69425e6"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-value",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
        }
      ],
      "purl": "pkg:npm/get-value@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-value@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18b281da585b1c5c51def24c930ed29a0be6b177"
        }
      ],
      "purl": "pkg:npm/has-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95b0b63fec2146619a6fe57fe75628d5a39efe4f"
        }
      ],
      "purl": "pkg:npm/has-values@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-value",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "870d32c64f464ff1ebe722446271cd2985e4200f2654981df5d8ad61909ed7a65ccdc6842d861c7ef6977ac3400a4d8ef0ed274e23d07108465108fc24bcde7a"
        }
      ],
      "purl": "pkg:npm/set-value@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-value/-/set-value-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-value/-/set-value-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split-string",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3733558490d8a7071e5558a2f3f1eee8329f0f61be36b407952fd5fea82fefadc462e755c0470c40dc5dda587ed15ad40725cdfe826497982b3a1616bd05188b"
        }
      ],
      "purl": "pkg:npm/split-string@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split-string@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26a71aaf073b39fb2127172746131c2704028db8"
        }
      ],
      "purl": "pkg:npm/extend-shallow@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assign-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
        }
      ],
      "purl": "pkg:npm/assign-symbols@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assign-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ab9d73314f5861a0aa3d9352d976694dc897430dfcb6bf47d78c5966a24e3e8bcba5ffa5a56d581ef5b84cef83a934f40f306513a03b73f8a5dad4f9de27138"
        }
      ],
      "purl": "pkg:npm/is-extendable@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-object-path",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "297588b7b0e7e0ac08e04e672f85c1f4999e17af"
        }
      ],
      "purl": "pkg:npm/to-object-path@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-object-path@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "union-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c71c34cb5bad5dcebe3ea0cd08207ba5aa1aea4"
        }
      ],
      "purl": "pkg:npm/union-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/union-value/-/union-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/union-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/union-value/-/union-value-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-union",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e39b09aea9def866a8f206e288af63919bae39c4"
        }
      ],
      "purl": "pkg:npm/arr-union@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-union@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-value",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7db08f9d3d22dc7f78e53af3c3bf4666ecdfccf1"
        }
      ],
      "purl": "pkg:npm/set-value@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-value/-/set-value-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-value/-/set-value-0.4.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unset-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
        }
      ],
      "purl": "pkg:npm/unset-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unset-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b1f58bada62ca827ec0a2078025654845995e1f"
        }
      ],
      "purl": "pkg:npm/has-value@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d61de95d91dfca9b9a02089ad384bff8f62b771"
        }
      ],
      "purl": "pkg:npm/has-values@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "class-utils",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e84f6bf163eece9363c1fc7ac1aee5036930c431cfbf61faeaf3acd60dea69fef419f194319fe5067e5de083b314a33eab12479e973993899a97aeae72cc7a"
        }
      ],
      "purl": "pkg:npm/class-utils@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/class-utils@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
        }
      ],
      "purl": "pkg:npm/define-property@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af0d8af4481dc3c0ef73b0ca2fd20282112158a829c4e21abfe33dd375496e904cb9b7d0b4611abb1cbaec379d8d01ca9729a7a97820f49fe0746ab9d51b71e"
        }
      ],
      "purl": "pkg:npm/is-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b5ee648388e2c860282e793f1856fec3f301b56"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "346104ae71fa176bd4b970e1f8e95b70a5bbff039c7dd447699ed55ada82ced7c7ae2ffef982a63f9d4e7567863eea8239b6ba924d8e4dee5dd365664c1f343f"
        }
      ],
      "purl": "pkg:npm/kind-of@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "static-extend",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60809c39cbff55337226fd5e0b520f341f1fb5c6"
        }
      ],
      "purl": "pkg:npm/static-extend@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-extend@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-copy",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e7d858b781bd7c991a41ba975ed3812754e998c"
        }
      ],
      "purl": "pkg:npm/object-copy@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-copy@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "copy-descriptor",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "676f6eb3c39997c2ee1ac3a924fd6124748f578d"
        }
      ],
      "purl": "pkg:npm/copy-descriptor@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-descriptor@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
        }
      ],
      "purl": "pkg:npm/define-property@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9e8ace56a90195ee97a8a03c8b98d10f52ba6cf7e4975f973da4bdf1101fb87bd1e71ae0daee607b907c47c3809ba92f64d53da1387de688bf27f16b62615b6"
        }
      ],
      "purl": "pkg:npm/is-descriptor@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b98671d391c56c3dfab1dc02a5cadb483dbec9f97ca41ef24fd81f5b6438e584b22812ae17a0aeb8560edba199555982ba2d463de1d60f104ecb87466464a71"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3990b39c9c7d17a833be16fb9a2d7f030e3675f0218593b572807e3442828f510856e1edabbccd2bc14ab4b7c2100cec1849e2cad3553dd0e8f305399ed90a8"
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8db457cb5166b40a028d0915988558c2ebaa0c551b68e7838e679dd6d3863ebb0c86d240e2b0fdb64800d05d6a2778111515dc1d856475e68fe74439ac4fe32d"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mixin-deep",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1922d2c778481aa84bdde656015df9b8119485097dbd25bf4afa50078432b345e28140a8f747eecd385ead8ea622f6de2823c5547da5884c9426f3ac275c635"
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mixin-deep@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascalcase",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b363e55e8006ca6fe21784d2db22bd15d7917f14"
        }
      ],
      "purl": "pkg:npm/pascalcase@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascalcase@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-cache",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-cache@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-resolve",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "323aacbcdc32cf5b3493cd46a33ffdbd105ef5265d074f41770fbfcd8c8efb70ae3e4e9fa2e4dac6c707920b44f232af7f4d6455f97cae21f311143f91e7da48"
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atob",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a6eae92868e1898bfef7a7f725d86bcb8d323924cd64fced788ac0fbdd830bf12b6b1ffeff9511609a0f272026600f76d966f8f0086c6d30e0f7c16340bbc72"
        }
      ],
      "purl": "pkg:npm/atob@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decode-uri-component",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb3913333458775cb84cd1a1fae062106bb87545"
        }
      ],
      "purl": "pkg:npm/decode-uri-component@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decode-uri-component@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-url",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c637fe77c893afd2a663fe21aa9080068e2052a"
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-url",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e935d7ddd73631b97659956d55128e87b5084a3"
        }
      ],
      "purl": "pkg:npm/source-map-url@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-url@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urix",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da937f7a62e21fec1fd18d49b35c2935067a6c72"
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urix@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73011255794edeeae5f585a5156fd303d72c842121b6eec8289fe9e6ca09fe01a98fbbdbbc5ac063f7888a843a0f0db72a3661620888a3c1ceb359d0dafaffa1"
        }
      ],
      "purl": "pkg:npm/use@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use/-/use-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use/-/use-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-node",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b6ee5e3168c62dfd1490e53477be9582001e4a6ff73321ca9414e33f0b87d870b9db6547353e48d300c8e87f6a4159a493c0e51deaa5077051951a3eda2309f"
        }
      ],
      "purl": "pkg:npm/snapdragon-node@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-node@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-util",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99b2a431d40ab235f80402f86d16138f6d5e74e7fc70ded71dd6142447be667f7d85511870cbca3dcb7522a35eefe0193e2ae7f01083390047419927aa62a565"
        }
      ],
      "purl": "pkg:npm/snapdragon-util@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-util@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "156b6578d02d67f2a2daab6a7a3d825d339ac8e1fd6c70d017e438f15a56c835e36d8c40e18cfc883077d735ce05494e1c72a27436ea195ad352f40c3e604607"
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f02b6515e1c9cfa5b706efe55101129364f516a30c1703c6f31f934feae774a1e031c983ee1995000bb84cba0a42773e01792665d8397d93ae821c9ff8e9961"
        }
      ],
      "purl": "pkg:npm/define-property@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-not",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27a4838d4803c508f936eb273ad745c43c0dffe1d6ca447c1842f072d27b99daa1732cb5c44738491147517bf14e9ebad586952808df44b67d702a92ead9f7d8"
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-not@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-regex",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40a3669f3b077d1e943d44629e157dd48023bf2e"
        }
      ],
      "purl": "pkg:npm/safe-regex@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ret",
      "version": "0.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a"
        }
      ],
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ret@0.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3666fa4179042ecb81af6e02252922968e941c781b7a42b95226607c4e941c3dc46f6ed80baa03f9b85c4feb49e9c97c766b20750c675a572bcbc92c04804ba7"
        }
      ],
      "purl": "pkg:npm/extglob@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b77735e315ce30f6b6eff0f83b04151a22449622"
        }
      ],
      "purl": "pkg:npm/expand-brackets@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "posix-character-classes",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
        }
      ],
      "purl": "pkg:npm/posix-character-classes@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/posix-character-classes@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fragment-cache",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4290fad27f13e89be7f33799c6bc5a0abfff0d19"
        }
      ],
      "purl": "pkg:npm/fragment-cache@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fragment-cache@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanomatch",
      "version": "1.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e9a1ed93d116c7c014c150e7ed01f04f683122d3ab9f6946a2d2613a627d6469c7374a74c4adf6ff87e5fde155f323ae2b2851d82265d2bddc061829b03aa08"
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanomatch@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520"
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.pick",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
        }
      ],
      "purl": "pkg:npm/object.pick@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.pick@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef"
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-done",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47505a51e2783cca0b349ba4fb4b4b2608e612a56c74dd75f3e67c3be6a5867403420cb49260f932a8b40cd126331d8b33411de727a42aef995d8bc81dc7a272"
        }
      ],
      "purl": "pkg:npm/async-done@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-done/-/async-done-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-done@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-done/-/async-done-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4c92b64dbd64ca09a8a06e7f96d797a5ab6041fcbdb69eaad26390ca968dd7ebebdc9499bc05be5d8d72419845fa7d2dfecc287f1785412b96762b126de2cd9"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-exhaust",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ffa9aabf1a504ae716aad72acaf7fcc57324524cdc66719c052c64931b499781997fe19e86822c983973af63b377784bc54401b56e40d1cf910f192bcf61097"
        }
      ],
      "purl": "pkg:npm/stream-exhaust@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-exhaust/-/stream-exhaust-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-exhaust@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-exhaust/-/stream-exhaust-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfd9fbcadf6b3af209acc86f0ed0e272d2ab9051de8a190d97ab9632666598bead26d5fd0acfbcee82beb5e071f89220cef6d7df26474f7785f2fa5b0f11c95d"
        }
      ],
      "purl": "pkg:npm/chokidar@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19d386a1d9edc6e7c1c85d388aedbcc56d33602d"
        }
      ],
      "purl": "pkg:npm/async-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e6af6299d8d3bd2bd40430832bd113df906c5ae"
        }
      ],
      "purl": "pkg:npm/glob-parent@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-dirname",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc33d24d525e099a5388c0336c6e32b9160609e0"
        }
      ],
      "purl": "pkg:npm/path-dirname@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-dirname@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75f16642b480f187a711c814161fd3a4a7655898"
        }
      ],
      "purl": "pkg:npm/is-binary-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d8586934d650dcc5e4bf2bd2073c659f4fc3ec2666d746d45dd92c7bd939dbf29718650145d684836fc849b52d6f869db5daad51ce2e5d51ff7e9ead28f5422"
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9521c76845cc2610a85203ddf080a958c2ffabc0"
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.debounce",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82d79bff30a67c4005ffd5e2515300ad9ca4d7af"
        }
      ],
      "purl": "pkg:npm/lodash.debounce@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.debounce@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-4.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4953ff2af95805672c70ac9f925483ac87e2b2c161a976cdcd4ea8a488aa43319592726018c8a220aa43be011bcd5897d7797475cf1cfb687178bb80b21fabd"
        }
      ],
      "purl": "pkg:npm/readdirp@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae1d484e3c4060436e0733eafa6ff43059f66afb2885722a4a16b38588112759dcb9b1dcd8a22fa925e41a3c8e6a38b445a969805d43d036c89e97374ba1e70"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upath",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f3a47fe8061a12fd023f62d6e4a8283a54488f623499b6b1d033afd09c94ba38bf6929414ba9bdda161e1272fc26e39fbb8808223242e149b699c54aa6ae9af"
        }
      ],
      "purl": "pkg:npm/upath@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upath/-/upath-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upath@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upath/-/upath-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfc1fcfdd8b293be81eeae7083e51dd3e0aacdc005de604123f6c0e677b9ceb454508bcd90963ffc3dc1ab21f9ef52ae002e0dafb470ec28d65f8af4cbd0ef36"
        }
      ],
      "purl": "pkg:npm/fsevents@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "258ed5ea54644ad29c293bc73b935549046ff9157e1482f9a6f0e82e202d48bf692a50b9c7d3ca41c643b2aee6e053b8779ee69210ba67e421021dc9764e4917"
        }
      ],
      "purl": "pkg:npm/nan@2.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.12.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bb904a2740b45b700fe63a8168c6f94caf0e90e9d3dff76fadfe5d0315232e4a50e859a23d2562323f02b48f21356e987ffc25042fae7f173d66daf25b9a341"
        }
      ],
      "purl": "pkg:npm/node-pre-gyp@0.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
        }
      ],
      "purl": "pkg:npm/detect-libc@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "needle",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7856a0cba73e4d86b2a2b5f0feab40752bda52911b06c0f00f2c581602d9d254e88df1fb2be39d06a005ed3005c03a2425a1a9b9ba52186d303b7882d173e2f3"
        }
      ],
      "purl": "pkg:npm/needle@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/needle@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "127e55f736b9981b76a14034dd6183dd3c03bf430a02bbaab2ec6cb5b31465a8fd5bd93f9b5095ffda72de5d0be64c3d0659fc7dd1d09b31d262dbe9bd32e92b"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.21",
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d0d4685afd5415193c8c7505602d0d17cd64474d"
        }
      ],
      "purl": "pkg:npm/nopt@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/nopt@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1"
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osenv",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0259c08409d315736470dd4e70f598ea5fa81aeae6e4d710d52b1b4140f2bbc22b3fd05dabf53ea4e3274662179c97b614071055c612f9a22b0fb0dc403deda"
        }
      ],
      "purl": "pkg:npm/osenv@0.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/osenv@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-homedir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffbc4988336e0e833de0c168c7ef152121aa7fb3"
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-packlist",
      "version": "1.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0100b40f28739f81226047c852309d325d0927ad48d8447dba47ffb0bc4951c6477e8f95c847f3dab30980b6524b5bf7d0ec4f41ed5c3742d9035c5b71a55f58"
        }
      ],
      "purl": "pkg:npm/npm-packlist@1.1.10",
      "type": "library",
      "bom-ref": "pkg:npm/npm-packlist@1.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore-walk",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d3565331dc860f7b4fc925c60fec6c60eedb5966edc822786e1216dc86eaa7798f7059ee4e8f2da65cb05a4055109a8d005b6af7a86ee6d6683cea3b3e82795"
        }
      ],
      "purl": "pkg:npm/ignore-walk@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ignore-walk@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-bundled",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "072437a09ff91132f2825536fbc74139bbe17d65d7f1db4f64331e3c26a1a6d962157da222e87212ccf2164e34d4f6543501f6d2fbdd5b930b8c9c64c14f343b"
        }
      ],
      "purl": "pkg:npm/npm-bundled@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/npm-bundled@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dae52a6b3b8a95369223f742f00ce2714724efe22b11a3a737f7b48dddd7b6dd4a706a70c77d2fe7498bee83f2aff87d6cbdc4e1a65c715c29c0ffb95bd56392"
        }
      ],
      "purl": "pkg:npm/npmlog@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-we-there-yet",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb5dca382bb94f05e15194373d16fd3ba1ca110d"
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delegates",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84c6e159b81904fdca59a0ef44cd870d31250f9a"
        }
      ],
      "purl": "pkg:npm/delegates@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delegates@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b50b4a03d588021045dfe54b02c7b232a65e0635b4007268c4eb58a92519349c5ab84ae62db566d855b5cbe27f600f5d52b002dfd2137a39595a1548c1ac242b"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/readable-stream/-/readable-stream-2.3.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d102d53a8dd045399dea61689e2b02d4e11ed0bce9d34df6a0ae121b6c86fa55064016e593bb04048df5112717d7a85c6711b9bfa916e284a4e1c4f876c433"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-control-strings",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d7cf4464db6446ea644bf4b39507f9851008e8e"
        }
      ],
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/console-control-strings@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gauge",
      "version": "2.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c03405c7538c39d7eb37b317022e325fb018bf7"
        }
      ],
      "purl": "pkg:npm/gauge@2.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/gauge@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aproba",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63d27a6635eda1887c4675d508c394fedb439a4d5a063ba7abdbced2d6b9c7ce560d08907d417db083c121375b8a2215701a34dc78b78ccc62801b6c75d95747"
        }
      ],
      "purl": "pkg:npm/aproba@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/aproba@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-unicode",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e0e6fe6a28cf51138855e086d1691e771de2a8b9"
        }
      ],
      "purl": "pkg:npm/has-unicode@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/has-unicode@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a30cb97243bb3ac7526008bbabe77a2c8e6fd45d4603f7ed0f6d82ab06c622b185f30b137e1c2de6603372fdd59d99fdc0c2ac14dc25f00c2bec36018ad52d3"
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2dd2c3f310f8cf32ec013e71caeb215c336c7048c1efedae96797cfabd699c44a562d949b554a808c046af7d1e0d1277fb61aaf3d8caf4ff5ee2d0841f5fb2c0"
        }
      ],
      "purl": "pkg:npm/rc@1.2.7",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37cbc174e6be0c5ef3911ac30ac68e5e80acfc4d9f25fc7d07d32b2a79d2887361e30b3b792cace98404e0abd3d5c79c2a638049840185b2a37ae0c3f654fcd7"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45963986e20a08c4560d4a999448bbd9ffe599728cbeeb3370c05dba5890de79d66f1f57fd90503bb0e28cc1184bd1211c16f6a9a71150cb42eecbcbc1ed2573"
        }
      ],
      "purl": "pkg:npm/ini@1.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96b79ec0b2bf0658219b1b5f1f7e986158358bc20071ee1323ba1aa3be48d60db8e7ee8172da935508813f761427d0ba0d039726691847d5fd7c22ed08e25ce7"
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911"
        }
      ],
      "purl": "pkg:npm/glob@7.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bebf5afdc8de2d3acbe5f74a791c03f8004a9b621c78d37e8018c9b4ef97c7f45f10c22de827ebf8bb9d05913fca92fcb0346b70924d33448fbc7989b55ffc6"
        }
      ],
      "purl": "pkg:npm/tar@4.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/tar@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chownr",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e2a75042a9551908bebd25b8523d5f9769d79181"
        }
      ],
      "purl": "pkg:npm/chownr@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/chownr@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-minipass",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "261065d2c9178d43c2147ef1eb1eb5810c6b2b25ecc41e6072078f2d90b07f20861ac4c848ca0878e6dbaef55e3fa5e6c9ab9dc384d3e37a95d86cfe8b2776a1"
        }
      ],
      "purl": "pkg:npm/fs-minipass@1.2.5",
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8735c85967adfc1cd6858b366febbb7511e5aee5e1c1d82f953303282e826f553ba6ce8073ac90951dfdc6c6e3589137efb6130ad2b0217229279a0ffa3e72f2"
        }
      ],
      "purl": "pkg:npm/minipass@2.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/minipass@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8452b4bb7e83c7c188d8041c1a837c773d6d8bb9"
        }
      ],
      "purl": "pkg:npm/yallist@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/yallist@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minizlib",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e13e94aff19cb59dbb9c77e9b7d4c739d459360c89f4565c8583b571e8394bc4370cd2c2298cb8e27099ce008981cbf1d9433c7339aa6a4e410b124caeadfb94"
        }
      ],
      "purl": "pkg:npm/minizlib@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/minizlib@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-negated-glob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6910bca5da8c95e784b5751b976cf5a10fee36d2"
        }
      ],
      "purl": "pkg:npm/is-negated-glob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-negated-glob/-/is-negated-glob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-negated-glob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-negated-glob/-/is-negated-glob-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "just-debounce",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87fccfaeffc0b68cd19d55f6722943f929ea35ea"
        }
      ],
      "purl": "pkg:npm/just-debounce@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/just-debounce/-/just-debounce-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/just-debounce@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/just-debounce/-/just-debounce-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.defaults",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a7f868334b407dea06da16d88d5cd29e435fecf"
        }
      ],
      "purl": "pkg:npm/object.defaults@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.defaults/-/object.defaults-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.defaults@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.defaults/-/object.defaults-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a794af0c05ab1752846ee753a1f211a05ba0c44f"
        }
      ],
      "purl": "pkg:npm/array-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-each/-/array-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-each/-/array-each-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-slice",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "075a8c0f74413fb3bca341f629bad70f207421c71e8cc175e7ef3b2ef968af5d8e34f4473fa8138d730d92dfdddd9b8e19b01eeba84599a09f102236e147e9eb"
        }
      ],
      "purl": "pkg:npm/array-slice@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-slice/-/array-slice-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-slice@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-slice/-/array-slice-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c63332f415cedc4b04dbfe70cf836494c53cb44b"
        }
      ],
      "purl": "pkg:npm/for-own@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-cli",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "471ba324974df3f3ba216da73ee825ed86b3866ac81239a255f3caad6b7af2bef550268b292ef51e9d20a4a4fe17aa8e505b6becaaad89f0ca68024f455bcc61"
        }
      ],
      "purl": "pkg:npm/gulp-cli@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-cli/-/gulp-cli-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-cli@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-cli/-/gulp-cli-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "485297ebb6ae48da15477f0ddcbfa7bec3e3384d1bc9b29361b91fe6d46fbac86b00f43d57be61bb0d19c4190a55e454f64a87ddde87038c537246f06788b198"
        }
      ],
      "purl": "pkg:npm/ansi-colors@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/ansi-colors/-/ansi-colors-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/ansi-colors/-/ansi-colors-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-wrap",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a82250ddb0015e9a27ca82e82ea603bbfa45efaf"
        }
      ],
      "purl": "pkg:npm/ansi-wrap@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-wrap/-/ansi-wrap-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-wrap@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-wrap/-/ansi-wrap-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9c8c13757cc1dd7bc379ac77b2c62a5c2868c40"
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-sort",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a12de264a2799d880b03eefa60377091731d89d92d138985be212ff9cc7048ee6294ab7c92bc1773cc17c3db7eae6c30501628b21b749608f73e9ac43d2a862"
        }
      ],
      "purl": "pkg:npm/array-sort@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-sort/-/array-sort-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-sort@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-sort/-/array-sort-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-compare",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4167d794cd049006ea3826c3ffa1e37704f5f63ed60a43328918568a57381fdff987f4734c5f60bf92d8875f82983579775ae48ba28058bb506a57b4c6ddb479"
        }
      ],
      "purl": "pkg:npm/default-compare@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-compare/-/default-compare-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-compare@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-compare/-/default-compare-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-support",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246"
        }
      ],
      "purl": "pkg:npm/color-support@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-support@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "copy-props",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edc8ee50c13ea7e4b71d995b96582c9f6083c12fb9782097d7aa8180d0b88e04937f8f6a47554acbf661978d349b42105e5fdb3c6115aa7720514323aebe2cf0"
        }
      ],
      "purl": "pkg:npm/copy-props@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/copy-props/-/copy-props-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-props@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/copy-props/-/copy-props-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "each-props",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd5d077a6df300690903253b2528e2c5e53aeabc1dca74c06b5be87c2ad20397c4967fa6ebb033f427279150fbefafdfb0dfd48c85a6043a0d452eade86f517c"
        }
      ],
      "purl": "pkg:npm/each-props@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/each-props/-/each-props-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/each-props@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/each-props/-/each-props-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fancy-log",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93da04865c9cd05ad5876e6a62e4842e3afca31b02a1ce3f2c465f83688926b7c493fb592fd6c2a09138ee0a80bc8da6fc052396e092e3edc8d1e4f1f27dc013"
        }
      ],
      "purl": "pkg:npm/fancy-log@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fancy-log@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-gray",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2962cf54ec9792c48510a3deb524436861ef7251"
        }
      ],
      "purl": "pkg:npm/ansi-gray@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-gray/-/ansi-gray-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-gray@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-gray/-/ansi-gray-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-node-version",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d361935470f5bb49d6736d27d86ed65ff3e07613451b4e23e5f8b53a4689ccf58b4dc7fabe1eb6dbd2ed6b5c139971bfec3838dad0acb2091c715b7baaf77c2a"
        }
      ],
      "purl": "pkg:npm/parse-node-version@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-node-version/-/parse-node-version-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-node-version@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-node-version/-/parse-node-version-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "time-stamp",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "764a5a11af50561921b133f3b44e618687e0f5c3"
        }
      ],
      "purl": "pkg:npm/time-stamp@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/time-stamp/-/time-stamp-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/time-stamp@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/time-stamp/-/time-stamp-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulplog",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e28c4d45d05ecbbed818363ce8f9c5926229ffe5"
        }
      ],
      "purl": "pkg:npm/gulplog@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulplog/-/gulplog-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulplog@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulplog/-/gulplog-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glogg",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7fe0f199f57ac906cf512feead8f90ee4a284fc5"
        }
      ],
      "purl": "pkg:npm/glogg@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glogg/-/glogg-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glogg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glogg/-/glogg-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sparkles",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1acbbfb592436d10bbe8f785b7cc6f82815012c3"
        }
      ],
      "purl": "pkg:npm/sparkles@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sparkles/-/sparkles-1.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sparkles@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sparkles/-/sparkles-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "interpret",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
        }
      ],
      "purl": "pkg:npm/interpret@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "liftoff",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2009291bb31cea861bbf10a7c15a28caf75c31ec"
        }
      ],
      "purl": "pkg:npm/liftoff@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/liftoff/-/liftoff-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/liftoff@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/liftoff/-/liftoff-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9326b1488c22d1a6088650a86901b2d9a90a2cbc"
        }
      ],
      "purl": "pkg:npm/findup-sync@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-file",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0d66d03672a825cb1b73bdb3fe62310c8e552b7"
        }
      ],
      "purl": "pkg:npm/detect-file@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-file/-/detect-file-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-file@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-file/-/detect-file-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-dir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a40644c362be82f26effe739c9bb5382046f43"
        }
      ],
      "purl": "pkg:npm/resolve-dir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-dir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-tilde",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97e801aa052df02454de46b02bf621642cdc8502"
        }
      ],
      "purl": "pkg:npm/expand-tilde@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-tilde@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "homedir-polyfill",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c2bbc8a758998feebf5ed68580f76d46768b4bc"
        }
      ],
      "purl": "pkg:npm/homedir-polyfill@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/homedir-polyfill@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-passwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d5b934a456993b23d37f40a382d6f1666a8e5c6"
        }
      ],
      "purl": "pkg:npm/parse-passwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-passwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-modules",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0ace91247f5d46a4e16ec346738f39ade01e146708ce706ef9ecf3efadf87170b15bab4c29b20a4eab1a71b71162086e03b46f7733a5d155b176a0675ebfb6e"
        }
      ],
      "purl": "pkg:npm/global-modules@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-modules@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-prefix",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbf743c6c14992593c655568cb66ed32c0122ebe"
        }
      ],
      "purl": "pkg:npm/global-prefix@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-prefix@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fined",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d0a7de3d66611b8981e4de091b76da49d06d7e920b4b40135d3f979d14fec587e58061c78b433eb23b54818fbd97920f065724c1ddb073018ac72558795dde6"
        }
      ],
      "purl": "pkg:npm/fined@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fined/-/fined-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fined@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fined/-/fined-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-filepath",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a632127f53aaf3d15876f5872f3ffac763d6c891"
        }
      ],
      "purl": "pkg:npm/parse-filepath@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-filepath@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-filepath/-/parse-filepath-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74e5a8a9f96f73274045adfad06befd7c0d9fe046e1ca8b6354ff05395f5645cdd61f1f6f67922359b05de6a78389dc7e32a3d331f00fee006373a733cddf204"
        }
      ],
      "purl": "pkg:npm/is-absolute@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b0fd178ad22ab029ebb43084cb16e8f48db3c098488eb08c32217bef6df6ba41f98df69903d4cfbca5d93b465fdd4ca6c7df8fd704531b803e2230984b41b18"
        }
      ],
      "purl": "pkg:npm/is-relative@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unc-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ab1a955dd1fb3b5962df56c4adbe017a8842676e30c5661f7f7a68510dc1964ddb937cd1ddf421de5301f781822375bc28e0e9fa86e9e4cedc0e680c34ca595"
        }
      ],
      "purl": "pkg:npm/is-unc-path@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unc-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unc-path-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
        }
      ],
      "purl": "pkg:npm/unc-path-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unc-path-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-root",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
        }
      ],
      "purl": "pkg:npm/path-root@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-root/-/path-root-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-root@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-root/-/path-root-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-root-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
        }
      ],
      "purl": "pkg:npm/path-root-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-root-regex/-/path-root-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-root-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-root-regex/-/path-root-regex-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flagged-respawn",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d687355ca66a39a4d0e24c067f1f554014d41b4378a22a2a8561938c4000b079eda00b83a6f85b431f27f71413483d6015f2e5785294f22960827b1da63fdd"
        }
      ],
      "purl": "pkg:npm/flagged-respawn@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flagged-respawn@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.map",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf83e59dc8fcc0ad5f4250e1f78b3b81bd801d37"
        }
      ],
      "purl": "pkg:npm/object.map@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.map/-/object.map-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.map/-/object.map-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-iterator",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a718ae5e1d22544abb54ceca30886ce60c6c7f10aec76511a6d510697a38899649c410334cf38b13606e98ee5d6df558abf841245051fdad6614398ec790069b"
        }
      ],
      "purl": "pkg:npm/make-iterator@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-iterator/-/make-iterator-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-iterator@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-iterator/-/make-iterator-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rechoir",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85204b54dba82d5742e28c96756ef43af50e3384"
        }
      ],
      "purl": "pkg:npm/rechoir@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rechoir@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "matchdep",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6f34834a0d8dbc3b37c27ee8bbcb27c7775582e"
        }
      ],
      "purl": "pkg:npm/matchdep@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/matchdep/-/matchdep-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/matchdep@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/matchdep/-/matchdep-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stack-trace",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "547c70b347e8d32b4e108ea1a2a159e5fdde19c0"
        }
      ],
      "purl": "pkg:npm/stack-trace@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-trace@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stdout",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9037305d1e0f4bb71a069b91618054cfd8958b1524dda9ceddfe4e6058883f02bfdb4bc2cca087c8aa2e95b8836354b9df30f66f1529c4dfc827e4e75e37efc6"
        }
      ],
      "purl": "pkg:npm/mute-stdout@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stdout/-/mute-stdout-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stdout@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stdout/-/mute-stdout-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-hrtime",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b7e3ea42435a4c9b2759d99e0f201eb195802ee1"
        }
      ],
      "purl": "pkg:npm/pretty-hrtime@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-hrtime@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-homedir",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e87f6d513b928dde808260c12be7fec6ff6e798c"
        }
      ],
      "purl": "pkg:npm/replace-homedir@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-homedir/-/replace-homedir-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-homedir@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-homedir/-/replace-homedir-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-greatest-satisfied-range",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "13e8c2658ab9691cb0cd71093240280d36f77a5b"
        }
      ],
      "purl": "pkg:npm/semver-greatest-satisfied-range@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-greatest-satisfied-range/-/semver-greatest-satisfied-range-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-greatest-satisfied-range@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-greatest-satisfied-range/-/semver-greatest-satisfied-range-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sver-compat",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3cf87dfeb4d07b4a3f14827bc186b3fd0c645cd8"
        }
      ],
      "purl": "pkg:npm/sver-compat@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sver-compat/-/sver-compat-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sver-compat@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sver-compat/-/sver-compat-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-iterator",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7de889141a05a94b0854403b2d0a0fbfa98f3b7"
        }
      ],
      "purl": "pkg:npm/es6-iterator@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-iterator@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "754bb5bfe55451da69a58b94d45f4c5b0462d58f"
        }
      ],
      "purl": "pkg:npm/d@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.38",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c233278fa3b0176d4112c1b97c422d355521f6a6263db3f6b7ad253fe70fcc953231f073cbd719f622718df1e8edff1ba57098274ceeefa8db4e031cd87762a"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.38",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.38.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.38.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf00ef4fdab6ba1b46ecb7b629b4c7ed5715cc77"
        }
      ],
      "purl": "pkg:npm/es6-symbol@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8flags",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b0ff556248469f7fc349dc72f21236b093ff218c989bdc4ee9bc6e2975d5577d4835f7cdecdd51ac8829438e12bae0c4150c6a9cd50f2bd7c4b854a4194bd11"
        }
      ],
      "purl": "pkg:npm/v8flags@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8flags/-/v8flags-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8flags@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8flags/-/v8flags-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ba318eb16961727f5d284f8ea003e8d6154d0c8"
        }
      ],
      "purl": "pkg:npm/yargs@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
        }
      ],
      "purl": "pkg:npm/camelcase@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "120601537a916d29940f934da3b48d585a39213d"
        }
      ],
      "purl": "pkg:npm/cliui@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
        }
      ],
      "purl": "pkg:npm/os-locale@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
        }
      ],
      "purl": "pkg:npm/lcid@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
        }
      ],
      "purl": "pkg:npm/invert-kv@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f638d415b4cf7c4cb747f69dff6a0d6cab56f47828be5e4ed45bc558a90a6e5357a0dfcea2eebef7e28aa213cad7761cdff4f2ba7c96849a7a82f44d47f3cf03"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed3fc1c47d7dcdb7024daf1790c95b2b9953a355ad824162dc6bdd584c8db9ce157b1efff43a9b9e9b1fe0933275c7e3f470a0e335161532f765aea56a9839ff"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-builtin-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
        }
      ],
      "purl": "pkg:npm/is-builtin-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-builtin-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96bd8464272d0b604d47b8fb5b32761690f39f1932d6c8dfc6fbd8132cf13726fa9595c7383984a09785bb826ea589647e16b5299a49ca8aa227ba60035aaaf1"
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "620e83dd7a510f89243a64e97606d48842452a08491f4ddf882d4e3e597987fd2c3ba9de8768ea443547390e28fcb31e6b4b600a46cc81e6b98a9fdef8c916ca"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9740009f1252a2f529556f509869d2835efa1a8cf80154f9ff80e40bad3bc774495a561afb6446ea25a46724b54d79a23870c10081509e04c285e8c5910c244"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa4cbd095b749552040a412c61b3482d59cfbf272e101917a0c14b456b11124a2640b7af621b51282f91f756b94ce010ddb08c8e2911c21c9a46a8f55586ad62"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bba63ca861948994ff307736089e3b96026c2a4f"
        }
      ],
      "purl": "pkg:npm/which-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
        }
      ],
      "purl": "pkg:npm/y18n@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "275ecf0d7ffe05c77e64e7c86e4cd94bf0e1228a"
        }
      ],
      "purl": "pkg:npm/yargs-parser@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "undertaker",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "339da4646252d082dc378e708067299750e11b49"
        }
      ],
      "purl": "pkg:npm/undertaker@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undertaker/-/undertaker-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undertaker@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undertaker/-/undertaker-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-map",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a77345ffc1cf35e2a91825601f9e58f2e24cac4"
        }
      ],
      "purl": "pkg:npm/arr-map@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-map/-/arr-map-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-map@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-map/-/arr-map-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bach",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b3ce96bf27134f79a1b414a51c14e34c3bd9880"
        }
      ],
      "purl": "pkg:npm/bach@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bach/-/bach-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bach@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bach/-/bach-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-filter",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "43fdddd091e8ef11aa4c45d9cdc18e2dff1711ee"
        }
      ],
      "purl": "pkg:npm/arr-filter@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-filter/-/arr-filter-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-filter@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-filter/-/arr-filter-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-initial",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2fa74b26739371c3947bd7a7adc73be334b3d795"
        }
      ],
      "purl": "pkg:npm/array-initial@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-initial/-/array-initial-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-initial@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-initial/-/array-initial-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad29257002257f53a615dc80a9b9d64cb55e96c439f2ebd9eba4bf6726b08d6a88be24d60a38363f3546c3c59403e9cdb8f4ea6f8c2003e36cceb27ed3c2e581"
        }
      ],
      "purl": "pkg:npm/is-number@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-last",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78e0aeb79ad7948e9a08e4bb67b902a652912b288543a7471417a6e0fc25c0a78d164dbf5f14eb8518794fd3f2684586cbf3474d959b63e9ec66534526ef6b62"
        }
      ],
      "purl": "pkg:npm/array-last@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-last/-/array-last-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-last@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-last/-/array-last-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-settle",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1d0a914bb02575bec8a8f3a74e5080f72b2c0c6b"
        }
      ],
      "purl": "pkg:npm/async-settle@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-settle/-/async-settle-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-settle@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-settle/-/async-settle-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "now-and-later",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bc61cbb456d79cb32207ce47ca05136ff2e7d6ee"
        }
      ],
      "purl": "pkg:npm/now-and-later@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/now-and-later/-/now-and-later-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/now-and-later@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/now-and-later/-/now-and-later-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collection-map",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aea0f06f8d26c780c2b75494385544b2255af18c"
        }
      ],
      "purl": "pkg:npm/collection-map@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collection-map/-/collection-map-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collection-map@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collection-map/-/collection-map-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-weak-map",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e3ab32251ffd1538a1f8e5ffa1357772f92d96f"
        }
      ],
      "purl": "pkg:npm/es6-weak-map@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-weak-map@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "last-run",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45b96942c17b1c79c772198259ba943bebf8ca5b"
        }
      ],
      "purl": "pkg:npm/last-run@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/last-run/-/last-run-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/last-run@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/last-run/-/last-run-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-resolution",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcb82baa72ad79b426a76732f1a81ad6df26d684"
        }
      ],
      "purl": "pkg:npm/default-resolution@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-resolution/-/default-resolution-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-resolution@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-resolution/-/default-resolution-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.reduce",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6fe348f2ac7fa0f95ca621226599096825bb03ad"
        }
      ],
      "purl": "pkg:npm/object.reduce@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.reduce/-/object.reduce-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.reduce@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.reduce/-/object.reduce-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undertaker-registry",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e4bda308e4a8a2ae584f9b9a4359a499825cc50"
        }
      ],
      "purl": "pkg:npm/undertaker-registry@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undertaker-registry/-/undertaker-registry-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undertaker-registry@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undertaker-registry/-/undertaker-registry-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-fs",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc8bb7e0493237227198fd23b1c3735814b2821ed55a1aae9fa466a957d778facec22f6586f46cfff74e68639345442be2dc7bff3776e9393959e495662b609e"
        }
      ],
      "purl": "pkg:npm/vinyl-fs@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-fs@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-mkdirp-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b7815fc3201c6a69e14db98ce098c16935259eb"
        }
      ],
      "purl": "pkg:npm/fs-mkdirp-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-mkdirp-stream/-/fs-mkdirp-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-mkdirp-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-mkdirp-stream/-/fs-mkdirp-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0004569b37c7c74ba39c43f3ced78d1ad94140be"
        }
      ],
      "purl": "pkg:npm/through2@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9beab3cdc9fb294c4499dd6031b72117e63678851b89e51ac645ada6dc87cb0ad7d2b13c40462a3c2d3b56ecb85a6df6ff1135e8d71d05cb5bf12d177bfe4879"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e001fa6797f334d05c1fee970cc7c0fc14edf3bb24c6a2653b49408770e47abe734e1700c46ea62b3fa21aedf4f142a83cf43c0dcab1ff8261ba3ce5b516be85"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-stream",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7045c99413b3eb94888d83ab46d0b404cc7bdde4"
        }
      ],
      "purl": "pkg:npm/glob-stream@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-stream/-/glob-stream-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-stream@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-stream/-/glob-stream-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ordered-read-streams",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c0cb37c41525d64166d990ffad7ec6a0e1363e"
        }
      ],
      "purl": "pkg:npm/ordered-read-streams@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ordered-read-streams@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pumpify",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a02959237ec7bee50927148a2ab0b5edb67d0aed1962110018fb0f532f4a94c526bfd74a5f6a3bed1526abb7f75e32316f0c86c18cdbcd0d4bd8ab3cb08ada75"
        }
      ],
      "purl": "pkg:npm/pumpify@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pumpify/-/pumpify-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pumpify@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pumpify/-/pumpify-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexify",
      "version": "3.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcce7c0f07672a6b72f8548fcd3d782bd2576fdd07fa3e5e99a4782986ebd8a4c8cf4d161c66d639ee608504f1db7dd908b66dac60c02f32b072312d4addf998"
        }
      ],
      "purl": "pkg:npm/duplexify@3.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexify/-/duplexify-3.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexify@3.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexify/-/duplexify-3.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-shift",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5c752825e5367e786f78e18e445ea223a155952"
        }
      ],
      "purl": "pkg:npm/stream-shift@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-shift@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aee3cc35190ddcc1cfd5c58973d396afe4ffc433f48e15d808b7c9701b97e788617c806769098050c7c3706e0333950c581c816c963af504a9866de3b4328890"
        }
      ],
      "purl": "pkg:npm/pump@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-absolute-glob",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1865f43d9e74b0822db9f145b78cff7d0f7c849b"
        }
      ],
      "purl": "pkg:npm/to-absolute-glob@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-absolute-glob/-/to-absolute-glob-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-absolute-glob@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-absolute-glob/-/to-absolute-glob-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-stream",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5aa003cfbe94c5ff866c4e7d668bb1c4dbadb369"
        }
      ],
      "purl": "pkg:npm/unique-stream@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-stream/-/unique-stream-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-stream@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-stream/-/unique-stream-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af"
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73"
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2-filter",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60bc55a0dacb76085db1f9dae99ab43f83d622ec"
        }
      ],
      "purl": "pkg:npm/through2-filter@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2-filter/-/through2-filter-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2-filter@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2-filter/-/through2-filter-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-valid-glob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29bf3eff701be2d4d315dbacc39bc39fe8f601aa"
        }
      ],
      "purl": "pkg:npm/is-valid-glob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-valid-glob/-/is-valid-glob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-valid-glob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-valid-glob/-/is-valid-glob-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazystream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6995fe0f820392f61396be89462407bb77168e4"
        }
      ],
      "purl": "pkg:npm/lazystream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazystream/-/lazystream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazystream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazystream/-/lazystream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lead",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6f14f99a37be3a9dd784f5495690e5903466ee42"
        }
      ],
      "purl": "pkg:npm/lead@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lead/-/lead-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lead@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lead/-/lead-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flush-write-stream",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71a959302d74bb414c52aa22ba7236022188214b5422f89f37090784dba9647e1c6cd9d6d48b64a21fcd7f91c56260ebc163e3ad4c699194f42a1b82ab48e61b"
        }
      ],
      "purl": "pkg:npm/flush-write-stream@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flush-write-stream/-/flush-write-stream-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flush-write-stream@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flush-write-stream/-/flush-write-stream-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.assign",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b11c97aaea404a8f9f26a86c9343d0c5beb642fde47a3b0c73a0cf58468181aab5d8a27685c8688532e73d559ad77fb0daaeb784c0ca6eac6ddd77e08dc96e7"
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d"
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1533321549b6c017061e71f67979b3eed0ba23096a419ea6559fba766eaf6782102078ece8574db1006e2863ee514518e8d7c9c363ec842d3c4e7e8bccb0ce6a"
        }
      ],
      "purl": "pkg:npm/object-keys@1.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba1a8f1af2a0fc39650f5c850367704122063b44"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-bom-buffer",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2fdab5a169a92fd7ca9cbcd7a58b6999fd33132f69c4c80291bf3a355ad9d9065d79487c8486b0aedbfc4a949c9414a1e21e07d7232b98ea0d9d39b249c9c5d"
        }
      ],
      "purl": "pkg:npm/remove-bom-buffer@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-bom-buffer/-/remove-bom-buffer-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-bom-buffer@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-bom-buffer/-/remove-bom-buffer-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-bom-stream",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "05f1a593f16e42e1fb90ebf59de8e569525f9523"
        }
      ],
      "purl": "pkg:npm/remove-bom-stream@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-bom-stream/-/remove-bom-stream-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-bom-stream@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-bom-stream/-/remove-bom-stream-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-options",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32bb9e39c06d67338dc9378c0d6d6074566ad131"
        }
      ],
      "purl": "pkg:npm/resolve-options@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-options/-/resolve-options-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-options@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-options/-/resolve-options-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "value-or-function",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c243a50b595c1be54a754bfece8563b9ff8d813"
        }
      ],
      "purl": "pkg:npm/value-or-function@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/value-or-function/-/value-or-function-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/value-or-function@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/value-or-function/-/value-or-function-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-through",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc92adaba072647bc0b67d6b03664aa195093af6"
        }
      ],
      "purl": "pkg:npm/to-through@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-through/-/to-through-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-through@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-through/-/to-through-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3011fec8fd240bf190e46c01aab4cf4f311f8a22e3b5aee14edbd0b5bc418137925ec98a41141e72389b31bc485f3553dd8f4a24af9dacecf5fe4fafb2ef0d92"
        }
      ],
      "purl": "pkg:npm/vinyl@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b7f4b9f591f1e8f83670401600345a02887435f"
        }
      ],
      "purl": "pkg:npm/clone@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-buffer",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e3e25b207ac4e701af721e2cb5a16792cac3dc58"
        }
      ],
      "purl": "pkg:npm/clone-buffer@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-buffer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3782dff8bb5474e18b9b6bf0fdfe782f8777680"
        }
      ],
      "purl": "pkg:npm/clone-stats@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cloneable-readable",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06aebee2dfa56ccf2f853b3f05e7f973901d10cb5aa69fe215bebeb38fc787d3154edf0e2ca1fb64e3994824fe62cee1b07beabf41ae30f275967409547bf1a6"
        }
      ],
      "purl": "pkg:npm/cloneable-readable@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cloneable-readable@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de63128373fcbf7c3ccfa4de5a480c45a67958eb"
        }
      ],
      "purl": "pkg:npm/replace-ext@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemap",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "92a800593a38703a8cdb11d8b300ad4be63b3e16"
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemap@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemap/-/vinyl-sourcemap-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemap@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemap/-/vinyl-sourcemap-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "append-buffer",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8220cf466081525efea50614f3de6514dfa58f1"
        }
      ],
      "purl": "pkg:npm/append-buffer@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/append-buffer/-/append-buffer-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/append-buffer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/append-buffer/-/append-buffer-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59616b498304d556abd466966b22eeda3eca5fbe"
        }
      ],
      "purl": "pkg:npm/buffer-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-equal/-/buffer-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-equal/-/buffer-equal-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "785bbb5e282fc5d6751137db80f068860c90fd9fbe0b4784853a2bd2a470070f6e9f0f8bd3fe95f30912b86833753864892e654a9769b4e40f0fc024e346beec"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-clang-format",
      "version": "1.0.23",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe258586b83998491e632fc0c4fc0ecdfa10c89f"
        }
      ],
      "purl": "pkg:npm/gulp-clang-format@1.0.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-clang-format/-/gulp-clang-format-1.0.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-clang-format@1.0.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-clang-format/-/gulp-clang-format-1.0.23.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-clang-format"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-diff",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "101b23712dd6b107bd07d05ab88ea3ac485fed77"
        }
      ],
      "purl": "pkg:npm/gulp-diff@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/gulp-diff/-/gulp-diff-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-diff@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/gulp-diff/-/gulp-diff-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-color",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6ee91bd0aaaad6128e8c3d1d5e8b1a863f2c216011d1b3ae7717d8df5c1d87c788dd33fdd6c62344d6fa69466c6d3087e5d7a485613a5896b9ea1ff1ec2bfdb"
        }
      ],
      "purl": "pkg:npm/cli-color@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-color/-/cli-color-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-color@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-color/-/cli-color-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.46",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db85f146f257345c0432925bde73a489124a468ba99a362638f56523ae50cb64abb71c0e4c1fa0e8e0e304a3adc041db62b85646dcbdc713962cd742953d9d8f"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.46",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.46.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.46",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.46.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next-tick",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca86d1fe8828169b0120208e3dc8424b9db8342c"
        }
      ],
      "purl": "pkg:npm/next-tick@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next-tick@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "memoizee",
      "version": "0.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2585bd67a00086003b8350329717fa072b6b4c8466ee0e9ed99476b05a5ab2677313aa0338861651f173bca32952b6baede5a4f5b6ecfdbbc2447cdb003c9a"
        }
      ],
      "purl": "pkg:npm/memoizee@0.4.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memoizee@0.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df8c69eef1647923c7157b9ce83840610b02cc39"
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
        }
      ],
      "purl": "pkg:npm/is-promise@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2738bd9f0d3cf4f84490c5736c48699ac632cda3"
        }
      ],
      "purl": "pkg:npm/lru-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timers-ext",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fce4d50dcd349da1d4a14c86e4cba645d367bc493b5555f0fe7eee1a5d74a11042e9a331fe6c2a492d830f65bb0004ddb00c7edf269a88a17c49a736dfd0da9"
        }
      ],
      "purl": "pkg:npm/timers-ext@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-ext@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60eafd0d28ee906e4e8ff0a52c1229521033bf99"
        }
      ],
      "purl": "pkg:npm/diff@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf289b0dcbb924bdb431ed5f3fbdf84011ff91e9c118b65aa769f4f975ccee6bee50fcc9db461daa3d5a29c21e31dae2d69f8f53ee3200aba08cdf0a095b2dfa"
        }
      ],
      "purl": "pkg:npm/event-stream@3.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "from",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83c60afc58b9c56997007ed1a768b3ab303a44fe"
        }
      ],
      "purl": "pkg:npm/from@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/from/-/from-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/from@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/from/-/from-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a1f07896d82b10926bd3744a2420009f88974a8"
        }
      ],
      "purl": "pkg:npm/map-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause-stream",
      "version": "0.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe5a34b0cbce12b5aa6a2b403ee2e73b602f1445"
        }
      ],
      "purl": "pkg:npm/pause-stream@0.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pause-stream@0.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "993c8ea0f6eb8afb579f09c8c59445611acf36d1052a5a41d9fbe34a7090522000eaa019ceac276b97a7bcae2e93a38878fd7b0ac745deb481198541b14d1392"
        }
      ],
      "purl": "pkg:npm/split@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split/-/split-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split/-/split-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aec8cbac177b56b6f4fa479ced8c1912cee52858"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-util",
      "version": "3.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0054e1e744502e27c04c187c3ecc505dd54bbb4f"
        }
      ],
      "purl": "pkg:npm/gulp-util@3.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-util@3.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eff52e3758249d33be402b8bb8e564bb2b5d4031"
        }
      ],
      "purl": "pkg:npm/array-differ@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "beeper",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e6d5ea8c5dad001304a70b22638447f69cb2f809"
        }
      ],
      "purl": "pkg:npm/beeper@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/beeper/-/beeper-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/beeper@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/beeper/-/beeper-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4065e2013cf9fb916ddfd82efb506ad4c6769062"
        }
      ],
      "purl": "pkg:npm/dateformat@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-gulplog",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6414c82913697da51590397dafb12f22967811ce"
        }
      ],
      "purl": "pkg:npm/has-gulplog@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-gulplog/-/has-gulplog-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-gulplog@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-gulplog/-/has-gulplog-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reescape",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b1d6f5dfe07c8a355753e5f27fac7f1cde1616a"
        }
      ],
      "purl": "pkg:npm/lodash._reescape@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reescape@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reevaluate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58bc74c40664953ae0b124d806996daca431e2ed"
        }
      ],
      "purl": "pkg:npm/lodash._reevaluate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ccf2d89166af03b3663c796538b75ac6e114d9d"
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8cdecc6169a255be9098ae8b0c53d378931d14f"
        }
      ],
      "purl": "pkg:npm/lodash.template@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecopy",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36"
        }
      ],
      "purl": "pkg:npm/lodash._basecopy@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecopy@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basetostring",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1861d877f824a52f669832dcaf3ee15566a07d5"
        }
      ],
      "purl": "pkg:npm/lodash._basetostring@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basetostring@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basevalues",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b775762802bde3d3297503e26300820fdf661b7"
        }
      ],
      "purl": "pkg:npm/lodash._basevalues@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basevalues@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isiterateecall",
      "version": "3.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5203ad7ba425fae842460e696db9cf3e6aac057c"
        }
      ],
      "purl": "pkg:npm/lodash._isiterateecall@3.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.escape",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "995ee0dc18c1b48cc92effae71a10aab5b487698"
        }
      ],
      "purl": "pkg:npm/lodash.escape@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.escape@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._root",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fba1c4524c19ee9a5f8136b4609f017cf4ded692"
        }
      ],
      "purl": "pkg:npm/lodash._root@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._root/-/lodash._root-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._root@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._root/-/lodash._root-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a"
        }
      ],
      "purl": "pkg:npm/lodash.keys@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._getnative",
      "version": "3.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5"
        }
      ],
      "purl": "pkg:npm/lodash._getnative@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._getnative@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash.isarguments",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f573d85c6a24289ff00663b491c1d338ff3458a"
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarguments@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarray",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55"
        }
      ],
      "purl": "pkg:npm/lodash.isarray@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarray@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.restparam",
      "version": "3.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "936a4e309ef330a7645ed4145986c85ae5b20805"
        }
      ],
      "purl": "pkg:npm/lodash.restparam@3.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.restparam@3.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb307844753b66b9f1afa54e262c745307dba8e5"
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multipipe",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a8f2ddf70eed564dff2d57f1e1a137d9f05078b"
        }
      ],
      "purl": "pkg:npm/multipipe@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multipipe@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c614dcf67e2fb14995a91711e5a617e8a60a31db"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cf4c54ef648e3813084c636dd2079e166c081d9"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bedd5ca0897949bca47e7ff408062d549f587f2"
        }
      ],
      "purl": "pkg:npm/object-assign@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29bbd92078a739f0bcce2b4ee41e837953522924"
        }
      ],
      "purl": "pkg:npm/replace-ext@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0455b38fc5e0cf30d4325132e461970c2091cde"
        }
      ],
      "purl": "pkg:npm/vinyl@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da309cc263df15994c688ca902179ca3c7cd7c7e"
        }
      ],
      "purl": "pkg:npm/clone@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b88f94a82cf38b8791d58046ea4029ad88ca99d1"
        }
      ],
      "purl": "pkg:npm/clone-stats@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkginfo",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b29f6a81f70717142e09e765bbeab97b4f81e21"
        }
      ],
      "purl": "pkg:npm/pkginfo@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkginfo/-/pkginfo-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkginfo@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkginfo/-/pkginfo-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner2",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb4d8a1420ea362764e21ad4780397bebcb41cbe"
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner2@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b12dab878c0d69e3e7891051662a32fc6bddcc1"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-equal",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc522fab38516012e4d4ee47513b147b72359019"
        }
      ],
      "purl": "pkg:npm/stream-equal@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-equal/-/stream-equal-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-equal@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-equal/-/stream-equal-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ab9c67b29d57209071410e1d7a7a968cd3ad48"
        }
      ],
      "purl": "pkg:npm/through2@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-tslint",
      "version": "8.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2843f7e7437907d260ea8ea39f20b229504f7a625e3d8a4cb067c842ad06d04aef63bb70e0badf6ffcb72f85917fb7a4d0eb1a13c9e78fceb0fa570b5d6f28bf"
        }
      ],
      "purl": "pkg:npm/gulp-tslint@8.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-tslint/-/gulp-tslint-8.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-tslint@8.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-tslint/-/gulp-tslint-8.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-tslint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "fancy-log",
      "version": "1.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9908c3c7238cd42a6871dfaf9b591904feec9b0299e1336890579db3d2d5ece6626e63c9144cd8dfec5932b29f51d353ef596ff06a023c3eaea4ac07c6e6c297"
        }
      ],
      "purl": "pkg:npm/%40types/fancy-log@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/fancy-log/-/fancy-log-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/fancy-log@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/fancy-log/-/fancy-log-1.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/fancy-log"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "414538a1f903a0c2153bb85cc7588f4c84acf3cc2c3bc8c0f76450226e0903066f146180576852000d4d5fba158f6123d90e8d0d37110e33d316b302459a09ea"
        }
      ],
      "purl": "pkg:npm/chalk@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/chalk/-/chalk-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/chalk/-/chalk-2.3.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd"
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fancy-log",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f41125e3d84f2e7d89a43d06d958c8f78be16be1"
        }
      ],
      "purl": "pkg:npm/fancy-log@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fancy-log@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fancy-log/-/fancy-log-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "plugin-error",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f5ccfd1d93bbc6c1e64c1368be11e6a4bd436a4ab76223717dd53c04a18886ac07d45e656fe9f248ab883cd8f017c4db163a9d09ed9a90cbfdd2cf3d1a8d3c4"
        }
      ],
      "purl": "pkg:npm/plugin-error@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/plugin-error/-/plugin-error-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/plugin-error@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/plugin-error/-/plugin-error-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.11",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7102a1f22828e5052167b960dfc0d8580c4cbe3480286d00f3019256298fd3b4885042b650ef9aad244a6d1656b5e94cb4de55d07930879af23ada3f4ac85822"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "0.3.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93835a5bebd2ef2b509fa320267ddf62942ddb4fe63a060ce45b7d05831f4090f3d904fac84792f5727c936370f094de58aff39cf3d6da7dd4246cf260488ca0"
        }
      ],
      "purl": "pkg:npm/marked@0.3.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-0.3.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@0.3.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-0.3.12.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "marked"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "6.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46d4c9b26993a06c9e4f39d238ca0ce933c493503ce0541a1c87222ab46a011671f81e5c709e6d5e5989cc428607165daa4f548e946c7ac653524666479627b9"
        }
      ],
      "purl": "pkg:npm/mocha@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-6.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mocha"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/mocha.js",
            "line": 9
          },
          {
            "location": "lib/frameworks/mocha.js",
            "line": 9
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c41c7cae8653d8dd39ae518321da8cfcf654d285fbe06e6cda05cc6f7bdb7ff56bb2ec3c1fe32a0029c343eca153d470107ea675daab5cf8352b04c78a17d9f"
        }
      ],
      "purl": "pkg:npm/ansi-colors@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-3.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983"
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e97e8dfee7aed125e4f9f5431e3acc0457283a416efcdecec7bba7b2ea20d99da0893c3d83f94b249ac44998bfa4d9d09c84280d61b0221de832218084ed59"
        }
      ],
      "purl": "pkg:npm/debug@3.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b60a7e765e5c1a4dbcbad624b41b2b16a03b1ca82b8603ec83a67f11f856238825d47c2af01fc6998ff4a1767a9c5f210d57ac4bf1699d8683fe439685842fca"
        }
      ],
      "purl": "pkg:npm/ms@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "038eaab4581dfa0ee90d98a7a67c22449b716c2d61a607f4bb33f7886f3db1c1e4d00502ec0d531b17f93a288e52ffc931947c18eb7c84bf74d215746cecb9c4"
        }
      ],
      "purl": "pkg:npm/diff@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdc7ee888c6880b5780e51811c850ec08d086eb27c1d63dce0c53b1f3be219e361a3f5090df8ba079a77b07796210d0a188534269c62e591f17a641f2e4900c1"
        }
      ],
      "purl": "pkg:npm/glob@7.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848"
        }
      ],
      "purl": "pkg:npm/growl@1.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17fd439d418fa29391662d278be0afac28074391721001d12d2029b9858c9ab6d2c28376327ffb93e1a5dfc8099d1ef2c83664e962d7c221a877524e58d0ca1b"
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c8b76727c263df2f884a370a9e8aecf86ca7e7cc74c1bfa1f25608da840ea63cbc0f0f38c35aba652413231d417192efcddc5966adbc8f72569df88fb8989dc"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55e20016c97221eac424b5c7ce279da366dab0a6cc2ad4f0def7e7e48cc6d174e38405442723479cbda9eef73ec010d2750b94a4dc37336bbac5bf50b0063912"
        }
      ],
      "purl": "pkg:npm/log-symbols@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-environment-flags",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "33daf00a75952d6ecf5fe35459edde8c47622d88a7469b04adef6132453fe8d4b887e104ba561a0c7d600846768325ec9b0f915d80da57626491335cb0f0c9d1"
        }
      ],
      "purl": "pkg:npm/node-environment-flags@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-environment-flags/-/node-environment-flags-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-environment-flags@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-environment-flags/-/node-environment-flags-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.getownpropertydescriptors",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8758c846f5b407adab0f236e0986f14b051caa16"
        }
      ],
      "purl": "pkg:npm/object.getownpropertydescriptors@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.getownpropertydescriptors@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc365f83fca4371415c2ea7ff04d4166157315f071b3d36a33319cbc826baa0e64dbfe596b66d6a38d1d2b6275a602e7819edcf92861f25c18b4b1b2af03eeb6"
        }
      ],
      "purl": "pkg:npm/es-abstract@1.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a99af204e26357ffcb6b12d357a502fff59ec27781dcb71738bf4d3fefa8cca557b08208a66ff6735dd40e20fd269d9e4e1b1e730f66de33ea0f04f2a1b71d6e"
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af9a7db3126362702b2e339ba63038c6ee44288dc2b8a1e42573214fb9306e95322050f59f93cc02ca0fbd69efb5988dcfb2e39180d166177b16523478c8a310"
        }
      ],
      "purl": "pkg:npm/is-callable@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d2f1b67da31eb4c8224b1fdb27069230bfda5850091cb8b852035a1eae8d54079cbd6a2429440f32d9ec7de3900eb4264bd652437889371b92ed86cc08e3a2f"
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5517489b547091b0930e095654ced25ee97e9491"
        }
      ],
      "purl": "pkg:npm/is-regex@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a27f4ac2275cd48510a3e6d07618bcf938a3a68d1ed524ba4681a8da0b94c27e6f75ac70f115ce17d55bdb0b3e8a158e9a1e099c224ebdace26563f554005a2e"
        }
      ],
      "purl": "pkg:npm/supports-color@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221"
        }
      ],
      "purl": "pkg:npm/which@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40690e41cf172fa06de4fc27b04c4a04fb8c281c671b15965b77d4e795ede1f787a3331485d50c6810a4dbdd2aa66ff01b9bbf4522b3c1d002e22e7562282284"
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "12.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e1cfc4cb6989f1abfd8e6ea1c3aa5f1d5fc0898bdee81f1ae351c62dcca6dbca43ed556f5607ea68c48f8d336508cec32034265321fd00430b232b9c8c02a67"
        }
      ],
      "purl": "pkg:npm/yargs@12.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-12.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@12.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-12.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "11.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ba901fd624389ac4e34b2509c5f1c731f5211ea134cb7a4f1155b68e22cac0512f15ac11177e67929c2671ca073e5c2dac34c048c0e3a77dcc62ca78c7b1549"
        }
      ],
      "purl": "pkg:npm/yargs-parser@11.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-11.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@11.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-11.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7daab066a9d6c5bc67f85d5ddfdf7281e6a640dcb794fa7f1fd1faacdaea621e054950ad718fb772e6f533103ca3d983779e6633c02086ebbf92ec9803a553b0"
        }
      ],
      "purl": "pkg:npm/camelcase@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-unparser",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cadb9aa27454c256e8ff0f555f3621277692c878937bf1aaa0476de72f7cb837453ff7570e033a9f1e517c9f606fa0d0dc66624a8a7ddd74d4af3b14abf1f97"
        }
      ],
      "purl": "pkg:npm/yargs-unparser@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-unparser@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "flat",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f1fd388b2339c7ee010394f5dc503e0a9c1bac6ba911e9ac915157271006eb79122e864aa8c3f9ae9f9f41b915f0a1893b65038b5b564cd398a522f2b7f2117"
        }
      ],
      "purl": "pkg:npm/flat@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat/-/flat-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat/-/flat-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "535e50ecc5d3b9996b6f29a2cfde4f269671bbc2258a9029e1db52df039d80f5f1de6a819ec96b594d789317c707e3f2ffed8f54a4abdfb74c020336038b80af"
        }
      ],
      "purl": "pkg:npm/is-buffer@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint",
      "version": "5.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98f30c02eae3cde7006201e4c33cb08b48581eed"
        }
      ],
      "purl": "pkg:npm/tslint@5.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint/-/tslint-5.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint@5.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint/-/tslint-5.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-code-frame",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63fd43f7dc1e3bb7ce35947db8fe369a3f58c74b"
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9866df395102130e38f7f996bceb65443209c25b"
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39b37a875bf67d32529945e84b79cc43dd8b6c32bd6dee1357ee86fa899094624575c517e6178a8b52d9d589d13088304cb123dc4db86d3ead6278b9d2b9427d"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eadbc038ef83e8e10dbd1021e76e0387d8dc7ca4d80d002abea7b36c25bcdb18f95f4a52adca71b6f44a1cb1b4c8163a483ecf483ac96a3fb402239c2957755e"
        }
      ],
      "purl": "pkg:npm/commander@2.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a596684b170261ca3e0c82814e29abebb27a1f2f8460664363f1c2582fa200403d87507284c5c021551731c305a4e0b143fc635e63c8d8c9032f91d19b9785ad"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e24ac5f2c7297a385a3a0ab304470633bc832047e2d3ff3ef330d166135967692398727886fdf309b416c68246cf58b0e54d099749e66b5df1cc75dc9dc31abd"
        }
      ],
      "purl": "pkg:npm/tslib@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "2.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8392551c2209c337c849a5e95c4d6abcd6a571ae49c286fa1632380283e5a8cbac27a7ed144ec892416832154b4602bee0ac77824cdbf1464ae6de724d3bc498"
        }
      ],
      "purl": "pkg:npm/tsutils@2.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@2.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint-eslint-rules",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a549713e276bd8fd53e021ca90ba28cc4227a5f94b665d2fb89ef2b86739438aa05f5ec7bc140be43674dc6219d0c8e4d6e4a14cfae451197c58845a6e05ceb"
        }
      ],
      "purl": "pkg:npm/tslint-eslint-rules@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint-eslint-rules/-/tslint-eslint-rules-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint-eslint-rules@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint-eslint-rules/-/tslint-eslint-rules-5.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cb860359ba3be90e040b26b729ce4bfa654c523"
        }
      ],
      "purl": "pkg:npm/doctrine@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-0.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c01ccaa9ae4b897c6d0c3e210ae52f3c7a844375"
        }
      ],
      "purl": "pkg:npm/esutils@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ffa861b6b5492b21206541912312aa19dc1dbe9e926321fd381f5c2e02ff6203c8b4e08729fbad4a457c457616b6dbaef4349a29b190888e10b74a78cf44aad"
        }
      ],
      "purl": "pkg:npm/tslib@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8896494db88ff50f37e6f86fa4255e60837822999217e61698b485507bba86c8a77b7aef13d6dd4363aa73e127360865c08fdb358b3c9c72d9bd65f97db11b9"
        }
      ],
      "purl": "pkg:npm/tsutils@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-3.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "3.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5428f95224b21c18f07d869c983b9cfcd3a4e10422c5b13e5a7ecc149b92d2746e3d06e87f5df63f0e2ee77766dbae0ef0b3dcd8c56c73b449366979b33bab92"
        }
      ],
      "purl": "pkg:npm/typescript@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-3.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "typescript"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "exampleTypescript/package.json"
          },
          {
            "location": "package.json"
          },
          {
            "location": "spec/install/package.json"
          },
          {
            "location": "testapp/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vrsource-tslint-rules",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3cf8026e1d3a9b63d263dd591248dc96dc3ec1c"
        }
      ],
      "purl": "pkg:npm/vrsource-tslint-rules@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vrsource-tslint-rules/-/vrsource-tslint-rules-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vrsource-tslint-rules@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vrsource-tslint-rules/-/vrsource-tslint-rules-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint",
      "version": "4.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "05356871bef23a434906734006fc188336ba824b"
        }
      ],
      "purl": "pkg:npm/tslint@4.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint/-/tslint-4.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint@4.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint/-/tslint-4.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a61adff5a59a984633310756b1853a35ebfb27559e64aeb2a472631e54ac7310230c5e80a09ef4cfa75d108077dc6d0670f03ab68cc346ea37b8265594d205a"
        }
      ],
      "purl": "pkg:npm/colors@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37930aa5d816b777c03445e1966cc6790a4c0b16"
        }
      ],
      "purl": "pkg:npm/findup-sync@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "5.0.15",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bc936b9e02f4a603fcc222ecf7633d30b8b93b1"
        }
      ],
      "purl": "pkg:npm/glob@5.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b273783b84e48a0ba36698562cdd04fff9d09a6efbf74458684e770dd2fb658c1e7b60fc0c3a3dfc4c9888a51f377ae77965238499ee7a28dadc6f48da2d21de"
        },
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "optimist"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/cli.js",
            "line": 4
          },
          {
            "location": "testapp/scripts/web-server.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a8b644efc5cf93c0e9b921e8a6f159d236f0838c22bd4bc1b7b1c279d19b61b294b16bb8f1e748e485876eb80b408ef7c35304a03b07fcf887fdf4094e121cb"
        },
        {
          "alg": "SHA-1",
          "content": "de3f98543dbf96082be48ad1a0c7cda836301dcf"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-0.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b9f9ab44e55af9681831d5f28d0aeeaf5c750cb0"
        }
      ],
      "purl": "pkg:npm/tsutils@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-notifier",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83031d8602471ae8fffb01c926cf5ee8f702b33a714756f6dfa8a0ace914a1f1a1a89b86f9a9a520ac00a47d485b559697ba2f671b17e3d94c0562f149d9b90f"
        }
      ],
      "purl": "pkg:npm/update-notifier@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-notifier/-/update-notifier-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-notifier@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-notifier/-/update-notifier-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boxen",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cd3e37d3af8df6ab1ef23a34326979b7752474307f6f5e9ede4f50454a5fc2e7583e1059ce47d85383522b79a8460660cd09e86c72c85ee397fe0b54c165b2f"
        }
      ],
      "purl": "pkg:npm/boxen@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boxen@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-align",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c36aeccba563b89ceb556f3690f0b1d9e3547f7f"
        }
      ],
      "purl": "pkg:npm/ansi-align@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-align/-/ansi-align-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-align@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-align/-/ansi-align-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d545635be1e33c542649c69173e5de6acfae34dd"
        }
      ],
      "purl": "pkg:npm/camelcase@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-boxes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fa917c3e59c94a004cd61f8ee509da651687143"
        }
      ],
      "purl": "pkg:npm/cli-boxes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-boxes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "term-size",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "458b83887f288fc56d6fffbfad262e26638efa69"
        }
      ],
      "purl": "pkg:npm/term-size@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/term-size/-/term-size-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/term-size@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/term-size/-/term-size-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "944becd34cc41ee32a63a9faf27ad5a65fc59777"
        }
      ],
      "purl": "pkg:npm/execa@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8bd0efee58fcff6f8f94510a0a554bbfa235449"
        }
      ],
      "purl": "pkg:npm/cross-spawn@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "4.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b166656c43f63ac1cd917acc97919893f8ca93bd0c06783a514e1823fa860d86e07fa61b3f812f9aa2126d70a826244ab3ed5b4a9147560431bc9d7b176962e6"
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c11f9218f076089a47dd512f93c6699a6a81d52"
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "widest-line",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05ae66f7f15ae17b7d79bd842d7b7bec9c550d5f30eea42b1f4cd2fd359225d2f20304235a83b3a738f997055fb43cfa9ff10ebb7b4d0024bce2fe74f6ac2724"
        }
      ],
      "purl": "pkg:npm/widest-line@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/widest-line/-/widest-line-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/widest-line/-/widest-line-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "configstore",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bedbf91ed1a371852016b5dce8ac7be3b07cdcc451552e51d554c44285efb8ffa4308fa27fabb2c15d270c6a22c9d251cb8ca4ee1f687793a0d24c71e335179b"
        }
      ],
      "purl": "pkg:npm/configstore@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/configstore/-/configstore-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/configstore@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/configstore/-/configstore-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-prop",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b54317af1944c525ba5361178a228648155d620b55f2a9472fe0b5d13b16e0f51163f89cf9e6b2b274a4c01e2403f981942cb2fc828327e2dcdf06d679a5edb9"
        }
      ],
      "purl": "pkg:npm/dot-prop@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e4729ac1f5fde025cd7d83a896dab9f4f67db0f"
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db0df547b489b6278926742d19ced154bd92b4cdaf19855fa943af503c47e9b0ba6894f13f14c5d069c8802caeeed8e872489458061045bc5aeef2a7df8b39b1"
        }
      ],
      "purl": "pkg:npm/make-dir@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-string",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e1057cca851abb93398f8b33ae187b99caec11a"
        }
      ],
      "purl": "pkg:npm/unique-string@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-string/-/unique-string-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-string@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-string/-/unique-string-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-random-string",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a230f64f568310e1498009940790ec99545bca7e"
        }
      ],
      "purl": "pkg:npm/crypto-random-string@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-random-string@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6e3de2b839d8d6aad7e2e7dca5bd52f4627df9485df381c01cbfbac13c51d56846a9683af819d1a09b78fb7244f01fdc072fb7c69a07c09dbd3e4c7ac76fcb4"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "496b2cc109eca8dbacfe2dc72b603c17c5870ad4"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-lazy",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "05698e3d45c88e8d7e9d92cb0584e77f096f3e43"
        }
      ],
      "purl": "pkg:npm/import-lazy@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-lazy@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-ci",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3ab5fb1a41a422dc935c8811fab2156a103be11aeb744945ebdf56a0f0f77c0416d55657067d68693e610ea0ce912794c585bca9bdfe72c91c3f5575b52225a"
        }
      ],
      "purl": "pkg:npm/is-ci@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-ci/-/is-ci-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-ci@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-ci/-/is-ci-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ci-info",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bec19d9304820e95a63fcd277004d7ee279ae435907a6835520096e49f2daa3537958c3814162e8fcf49d024d5a2603b0447ef49977ce06987928f8cc45414d8"
        }
      ],
      "purl": "pkg:npm/ci-info@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ci-info/-/ci-info-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ci-info/-/ci-info-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-installed-globally",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dfd98f5a9111716dd535dda6492f67bf3d25a80"
        }
      ],
      "purl": "pkg:npm/is-installed-globally@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-installed-globally@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-dirs",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b319c0dd4607f353f3be9cca4c72fc148c49f445"
        }
      ],
      "purl": "pkg:npm/global-dirs@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-dirs/-/global-dirs-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-dirs@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-dirs/-/global-dirs-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ef5b7de50437a3fdca6b4e865ef7aa55cb48036"
        }
      ],
      "purl": "pkg:npm/is-path-inside@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-inside",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "365417dede44430d1c11af61027facf074bdfc53"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-inside@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-npm",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f2fb63a65e4905b406c86072765a1a4dc793b9f4"
        }
      ],
      "purl": "pkg:npm/is-npm@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-npm@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a205383fea322b33b5ae3b18abee0dc2f356ee15"
        }
      ],
      "purl": "pkg:npm/latest-version@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/latest-version/-/latest-version-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/latest-version/-/latest-version-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8869a0401253661c4c4ca3da6c2121ed555f5eed"
        }
      ],
      "purl": "pkg:npm/package-json@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json/-/package-json-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json/-/package-json-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "6.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "240cd05785a9a18e561dc1b44b41c763ef1e8db0"
        }
      ],
      "purl": "pkg:npm/got@6.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-6.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@6.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-6.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-error-class",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06be7abef947a3f14a30fd610671d401bca8b7b6"
        }
      ],
      "purl": "pkg:npm/create-error-class@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-error-class@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "capture-stack-trace",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99840b667c7942dd49801d561223027f6eb8ee996919e43634c47fe4bd07359cc6428e1fb923e72bec237cf9ca655d1a8890e0ce65aaaa457f83b243f835b4ab"
        }
      ],
      "purl": "pkg:npm/capture-stack-trace@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/capture-stack-trace@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer3",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
        }
      ],
      "purl": "pkg:npm/duplexer3@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer3@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-redirect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1d03dded53bd8db0f30c26e4f95d36fc7c87dc24"
        }
      ],
      "purl": "pkg:npm/is-redirect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-redirect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11a060568b67339444033d0125a61a20d564fb34"
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timed-out",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f32eacac5a175bea25d7fab565ab3ed8741ef56f"
        }
      ],
      "purl": "pkg:npm/timed-out@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timed-out/-/timed-out-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timed-out@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timed-out/-/timed-out-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unzip-response",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2f0f737d16b0615e72a6935ed04214572d56f97"
        }
      ],
      "purl": "pkg:npm/unzip-response@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unzip-response/-/unzip-response-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unzip-response@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unzip-response/-/unzip-response-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse-lax",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7af8f303645e9bd79a272e7a14ac68bc0609da73"
        }
      ],
      "purl": "pkg:npm/url-parse-lax@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prepend-http",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
        }
      ],
      "purl": "pkg:npm/prepend-http@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-auth-token",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24bdfd73ad1797309580dacefaaabaf05a0d6f9eb0fe6ec962f191da34f9891d7106b500dcc7f1e53c24e6ba934e13e640a316c9d1a6abca05b439717eb9b19d"
        }
      ],
      "purl": "pkg:npm/registry-auth-token@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-auth-token@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76c682a2a3dd005dc4b6cb9289a5a2192fb00f207408944254812670617e7f813f18386dceb677c4dc056d79c1abc37e07b10a071c72485c66fcb0c9060f3b"
        }
      ],
      "purl": "pkg:npm/rc@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d4ef870f73dde1d77f0cf9a381432444e174942"
        }
      ],
      "purl": "pkg:npm/registry-url@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-diff",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4bbb8437c8d37e4b0cf1a68fd726ec6d645d6d36"
        }
      ],
      "purl": "pkg:npm/semver-diff@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-diff@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "adf53529c8d4af02ef24fb8d5341c1419d33e2f7"
        }
      ],
      "purl": "pkg:npm/bower@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower/-/bower-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower/-/bower-1.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "0.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d724a719b5acf5c0b840b4224715e838406a419"
        }
      ],
      "purl": "pkg:npm/del@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-0.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "del"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "each-async",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dee5229bdf0ab6ba2012a395e1b869abf8813473"
        }
      ],
      "purl": "pkg:npm/each-async@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/each-async/-/each-async-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/each-async@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/each-async/-/each-async-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
        }
      ],
      "purl": "pkg:npm/onetime@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-immediate-shim",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
        }
      ],
      "purl": "pkg:npm/set-immediate-shim@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-immediate-shim@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbec63df724b4bea458b79a16cc0e3b1f2ca8620"
        }
      ],
      "purl": "pkg:npm/globby@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12e2c9b706bed47c8b483b57e487473fb0861f3a"
        }
      ],
      "purl": "pkg:npm/array-differ@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ede98088330665e699e1ebf0227cbc6034e627db"
        }
      ],
      "purl": "pkg:npm/array-union@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5861f3ed4e4bb6175597a4e078e8aa78ebe958c7"
        }
      ],
      "purl": "pkg:npm/array-uniq@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aea74d5e61c1f899613bf64bda66d4c78f2fd17d"
        }
      ],
      "purl": "pkg:npm/async@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6cb73d3226c1efef04de3c56d012f03377ee15f"
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d087c39c6b38c001b97fca7ce6d0e1e80afbac7"
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d225ec23132e89edd38fda767472e62e65f1106d"
        }
      ],
      "purl": "pkg:npm/is-path-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-in-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6477582b8214d602346094567003be8a9eac04dc"
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dgeni",
      "version": "0.4.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e42775b1386ca5eb824753ac2cd169d8f61ced1"
        }
      ],
      "purl": "pkg:npm/dgeni@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dgeni/-/dgeni-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dgeni@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dgeni/-/dgeni-0.4.9.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "dgeni"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "canonical-path",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e31eb937a8c93ee2a01df1839794721902874574"
        }
      ],
      "purl": "pkg:npm/canonical-path@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/canonical-path/-/canonical-path-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/canonical-path@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/canonical-path/-/canonical-path-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dependency-graph",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "302e58218d85c51a97638730dbf9b7d852a19693"
        }
      ],
      "purl": "pkg:npm/dependency-graph@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dependency-graph/-/dependency-graph-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dependency-graph@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dependency-graph/-/dependency-graph-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "di",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "806649326ceaa7caa3306d75d985ea2748ba913c"
        }
      ],
      "purl": "pkg:npm/di@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/di@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.10.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
        }
      ],
      "purl": "pkg:npm/lodash@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "objectdiff",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d7a15be6cb8670df8a490cc6be12a4f05ea82f4"
        }
      ],
      "purl": "pkg:npm/objectdiff@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/objectdiff/-/objectdiff-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/objectdiff@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/objectdiff/-/objectdiff-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "55705bcd93c5f3673530c2c2cbc0c2b3addc286e"
        }
      ],
      "purl": "pkg:npm/q@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate.js",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8acf0144f1520a19835c6cc663f45e0836aa56c8"
        }
      ],
      "purl": "pkg:npm/validate.js@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate.js/-/validate.js-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate.js@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate.js/-/validate.js-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "winston",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "808050b93d52661ed9fb6c26b3f0c826708b0aee"
        }
      ],
      "purl": "pkg:npm/winston@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/winston/-/winston-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/winston@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/winston/-/winston-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8fc04ca3a13784ade9e1641af98578cfbd647a9"
        }
      ],
      "purl": "pkg:npm/async@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0433f44d809680fdeb60ed260f1b0c262e82a40b"
        }
      ],
      "purl": "pkg:npm/colors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cycle",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21e80b2be8580f98b468f379430662b046c34ad2"
        }
      ],
      "purl": "pkg:npm/cycle@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cycle/-/cycle-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cycle@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cycle/-/cycle-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eyes",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62cf120234c683785d902348a800ef3e0cc20bc0"
        }
      ],
      "purl": "pkg:npm/eyes@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eyes@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dgeni-packages",
      "version": "0.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42bb561bd464f7d28e03d4e2bcc255d605a34d35"
        }
      ],
      "purl": "pkg:npm/dgeni-packages@0.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dgeni-packages/-/dgeni-packages-0.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dgeni-packages@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dgeni-packages/-/dgeni-packages-0.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "catharsis",
      "version": "0.8.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98cc890ca652dd2ef0e70b37925310ff9e90fc8b"
        }
      ],
      "purl": "pkg:npm/catharsis@0.8.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/catharsis@0.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore-contrib",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "665b66c24783f8fa2b18c9f8cbb0e2c7d48c26c7"
        }
      ],
      "purl": "pkg:npm/underscore-contrib@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore-contrib@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b38b10cacdef63337b8b24e4ff86d45aea529a8"
        }
      ],
      "purl": "pkg:npm/underscore@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "change-case",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c4fde3f063bb41d00cd68e0d5a09db61cbe894f"
        }
      ],
      "purl": "pkg:npm/change-case@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/change-case/-/change-case-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/change-case@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/change-case/-/change-case-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1aca7c4d195359a2ce9955793433c6e5542511f2"
        }
      ],
      "purl": "pkg:npm/camel-case@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sentence-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8034aafc2145772d3abe1509aa42c9e1042dc139"
        }
      ],
      "purl": "pkg:npm/sentence-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sentence-case/-/sentence-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sentence-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sentence-case/-/sentence-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a2cabd1b9e8e0ae993a4bf7d5875c39c42e8eac"
        }
      ],
      "purl": "pkg:npm/lower-case@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6b4501c2ec4cdd26ba78be7222961de77621598"
        }
      ],
      "purl": "pkg:npm/upper-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constant-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ec2ca5ba343e00aa38dbf4e200fd5ac907efd63"
        }
      ],
      "purl": "pkg:npm/constant-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constant-case/-/constant-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constant-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constant-case/-/constant-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snake-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c2f25e305158d9a18d3d977066187fef8a5a66a"
        }
      ],
      "purl": "pkg:npm/snake-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snake-case/-/snake-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snake-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snake-case/-/snake-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e73826900de28d6de5480bc1de31d0842b06bec"
        }
      ],
      "purl": "pkg:npm/dot-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-case/-/dot-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-case/-/dot-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-lower-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e147be4768dc466db3bfb21cc60b31e6ad69393"
        }
      ],
      "purl": "pkg:npm/is-lower-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-lower-case/-/is-lower-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-lower-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-lower-case/-/is-lower-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-upper-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d0b1fa7e7933a1e58483600ec7d9661cbaf756f"
        }
      ],
      "purl": "pkg:npm/is-upper-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-upper-case/-/is-upper-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-upper-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-upper-case/-/is-upper-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case-first",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5da7c26f29a7073be02d52bac9980e5922adfa1"
        }
      ],
      "purl": "pkg:npm/lower-case-first@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case-first/-/lower-case-first-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case-first@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case-first/-/lower-case-first-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcb091a43c259b9228f1c341e7b6a44ea0bf9743"
        }
      ],
      "purl": "pkg:npm/param-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascal-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e5d64a20043830a7c49344c2d74b41be0c9c99b"
        }
      ],
      "purl": "pkg:npm/pascal-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascal-case/-/pascal-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascal-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascal-case/-/pascal-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case-first",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5d79bedcff14419518fd2edb0a0507c9b6859115"
        }
      ],
      "purl": "pkg:npm/upper-case-first@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case-first@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50ce6ba0d3bed3dd0b5c2a9c4553697434409514"
        }
      ],
      "purl": "pkg:npm/path-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-case/-/path-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-case/-/path-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "swap-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c39203a4587385fad3c850a0bd1bcafa081974e3"
        }
      ],
      "purl": "pkg:npm/swap-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/swap-case/-/swap-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/swap-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/swap-case/-/swap-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "title-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fae4a6ae546bfa22d083a0eea910a40d12ed4f5a"
        }
      ],
      "purl": "pkg:npm/title-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/title-case/-/title-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/title-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/title-case/-/title-case-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "2.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df691b9310889402aeb29cc066708c56690b854b"
        }
      ],
      "purl": "pkg:npm/espree@2.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dee3fed31fcd469618ce7342099fc1afa0bdb13"
        }
      ],
      "purl": "pkg:npm/estraverse@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.11",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a973f635b9190f715d10987d5c00fd2815ebe3d"
        }
      ],
      "purl": "pkg:npm/glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "275d8edaac4f1bb3326472089e7949c8394699dd"
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d4524e8b955f95d4f5b58851ce21dd72fb4e952"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ff21f198cad2175f9f3b781853fd94d0d19b590"
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bdf87acca0f3f9e53fa4fcceb0f4b4cbb00b338"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "892e47000a99be55bbf3774ffea0561d8879c259"
        }
      ],
      "purl": "pkg:npm/domhandler@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1958cc0b4c9426e9ed367fb1c8e854891b0fa3ff"
        }
      ],
      "purl": "pkg:npm/domutils@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "073c697546ce0780ce23be4a28e293e40bc30c82"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd28773e2642881aec51544924299c5cd822185b"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0"
        }
      ],
      "purl": "pkg:npm/entities@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "2.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fadd834b9683073da179b3eae6d9c0d15053f73e"
        }
      ],
      "purl": "pkg:npm/lodash@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-html-encoder",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8973618d727da5526a830b47d07c0d803e0a15c6"
        }
      ],
      "purl": "pkg:npm/node-html-encoder@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-html-encoder/-/node-html-encoder-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-html-encoder@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-html-encoder/-/node-html-encoder-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nunjucks",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ddd10a8364b1a64d3e3d7d2a8d4368131d39042"
        }
      ],
      "purl": "pkg:npm/nunjucks@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nunjucks/-/nunjucks-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nunjucks@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nunjucks/-/nunjucks-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "0.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be204f5b9634e009311256e5d6e8e0e508284d2f"
        }
      ],
      "purl": "pkg:npm/chokidar@0.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-0.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@0.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-0.12.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b67e99edcddf96541e44af56290cd7d5c6e70439"
        }
      ],
      "purl": "pkg:npm/async-each@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaf1a9b463be9a8190fc9ae163aa1ac934aa340b"
        }
      ],
      "purl": "pkg:npm/readdirp@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cd2cdb228a4a3f36e95efa6cc142de7d1a136d0"
        }
      ],
      "purl": "pkg:npm/graceful-fs@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c74e780574f63c6f9a090e90efbe6ef53a6a756a"
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11872aeedee89268110b10a718448ffb10112a14"
        }
      ],
      "purl": "pkg:npm/q@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q-io",
      "version": "1.10.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "90473f797398eb1208b7edd468ed1785ad7baacd"
        }
      ],
      "purl": "pkg:npm/q-io@1.10.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q-io/-/q-io-1.10.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q-io@1.10.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q-io/-/q-io-1.10.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collections",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f23026b2ef36f927eecc901e99c5f0d48fa334e"
        }
      ],
      "purl": "pkg:npm/collections@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collections/-/collections-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collections@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collections/-/collections-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "weak-map",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b66e56a9df0bd25a76bbf1b514db129080614a37"
        }
      ],
      "purl": "pkg:npm/weak-map@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/weak-map/-/weak-map-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/weak-map@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/weak-map/-/weak-map-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10"
        }
      ],
      "purl": "pkg:npm/mime@1.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimeparse",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dafb02752370fd226093ae3152c271af01ac254a"
        }
      ],
      "purl": "pkg:npm/mimeparse@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimeparse/-/mimeparse-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimeparse@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimeparse/-/mimeparse-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "0.9.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4de2e6cb3b29088c9e4cbc03bf9d42fb96ce2f75"
        }
      ],
      "purl": "pkg:npm/q@0.9.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-0.9.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@0.9.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-0.9.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a0d2d70d01f63d3401ea4b050822601b462ee6b"
        }
      ],
      "purl": "pkg:npm/qs@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url2",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4eaabd1d5c3ac90d62ab4485c998422865a04b1a"
        }
      ],
      "purl": "pkg:npm/url2@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url2/-/url2-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url2@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url2/-/url2-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "300bc6e0e86374f7ba61068b5b1ecd57fc6532da"
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c54982b996c76ef0c1e6b59fbdc5825f5b713113"
        }
      ],
      "purl": "pkg:npm/shelljs@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-list",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3788ffb5c80b24afbe8283934e9e6684ea6a218d"
        }
      ],
      "purl": "pkg:npm/spdx-license-list@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-list@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringmap",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "556c137b258f942b8776f5b2ef582aa069d7d1b1"
        }
      ],
      "purl": "pkg:npm/stringmap@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringmap@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "winston",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ae313ba73fcdc2ecb4aa2f9cd446e8298677266"
        }
      ],
      "purl": "pkg:npm/winston@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/winston/-/winston-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/winston@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/winston/-/winston-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6bbe0b0674b9d719708ca38de8c237cb526c3d1"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "async/async.html"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng1/app.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2423fe6678ac0c5dae8852e5d0e5be08c997abcc"
        }
      ],
      "purl": "pkg:npm/colors@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.16.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "872fe445ae72de266b37879d6ad7dc948fa01cad"
        }
      ],
      "purl": "pkg:npm/request@2.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.16.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c55013856c8194ec854a0cbec90aab5a04ce3ac5"
        }
      ],
      "purl": "pkg:npm/aws-sign@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-jar",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64ecc06ac978db795e4b5290cbe48ba3781400fa"
        }
      ],
      "purl": "pkg:npm/cookie-jar@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-jar@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e1c25c7ad44e09c38f233876c76fcc24ff843b1f"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "db345a5378d86aeeb1ed5d553b869ac192d2f5ed"
        }
      ],
      "purl": "pkg:npm/form-data@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0137e657baa5a7541c57ac37ac5fc07d73b4dc1f"
        }
      ],
      "purl": "pkg:npm/combined-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4b1f43a93e8296dfe02694f4680bc37a313c73f"
        }
      ],
      "purl": "pkg:npm/delayed-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "0.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b361dee95a931640e6d504e05609a8fc3ac45d2"
        }
      ],
      "purl": "pkg:npm/hawk@0.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@0.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8cdb041435912741628c044ecc732d1d17c09ea"
        }
      ],
      "purl": "pkg:npm/boom@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.7.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60fbd904557541cd2b8795abf308a1b3770e155a"
        }
      ],
      "purl": "pkg:npm/hoek@0.7.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a556734f06d24ba34862ae9cb9e709a3afbff1c"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ef481b951a7b29affdf4afd7f26838fc1120f84"
        }
      ],
      "purl": "pkg:npm/sntp@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9db7b0e530c7f289c5e8c8432af191c2ff75a5b3"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-uuid",
      "version": "1.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b040eb0923968afabf8d32fb1f17f1167fdab907"
        }
      ],
      "purl": "pkg:npm/node-uuid@1.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-uuid@1.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a0e6a1715daed062f322b622b7fe5afd1035b6e2"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31b1ad058567651c526921506b9a8793911a0384"
        }
      ],
      "purl": "pkg:npm/qs@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6853c2afb1b2109e45629e492bde35f459ea69e8"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3efe4810741491bb1c8f67df526d6b2e0dd57790"
        }
      ],
      "purl": "pkg:npm/esprima@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp",
      "version": "3.9.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "571ce45928dd40af6514fc4011866016c13845b4"
        }
      ],
      "purl": "pkg:npm/gulp@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp/-/gulp-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp/-/gulp-3.9.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 3
          },
          {
            "location": "website/gulpfile.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deprecated",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9c9af5464afa1e7a971458a8bdef2aa94d5bb19"
        }
      ],
      "purl": "pkg:npm/deprecated@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deprecated@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glogg",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca762a5cba25b8129ff57191d60039f721098ac20bed81c41f8c6bdd9ce21c1e7fca5e2a59f68af09b3d8c67ba801182482295aa2c8edf45a7459003bde99437"
        }
      ],
      "purl": "pkg:npm/glogg@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glogg/-/glogg-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glogg@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glogg/-/glogg-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "298d7e2231660f40c003c2ed3140decf3f53085f"
        }
      ],
      "purl": "pkg:npm/clone@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a755ea7bc1adfcc5a31ce7e762dbaadc5e636444"
        }
      ],
      "purl": "pkg:npm/extend@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca4b6dacb3d0af3d4f5097178f0b135231a83c9eb84ad206344da51950f573d0ae82e27e2fbfe76afb04f0870336774ea0232f615d2a73f7b17d56cc1e4521bc"
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f83bc51045d1a230b5928b3b00a665d5403052e8a0adedd49ec602ca0661f91ebd4266aeefb27b1c161f28475b0fd5a6f5663d2e087084cd9795e927d47f7ac"
        }
      ],
      "purl": "pkg:npm/braces@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a"
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e12b5487faded3e3dea0ac91e9400bf75b401370"
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mixin-deep",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "760682be887a8b59e8b0050129bd25d297c9efc2bcf92f5f96ec8847662f01e503fd0b8c6a19c59c5df162dcb97985cc8e1192b01d03b16e80d2e019c9eb6802"
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mixin-deep@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-resolve",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a5b6c2fcdfc66f0d0936f7d33d0b30dc8fa9609d0c6136be2c3351ab9ca897644d15ed662498dc8fb603a9d502399d3b2d08e2053c0f09d5546b24f63bcfd8"
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atob",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19c7a760473774468f20b2d2d03372ad7d4cbf5d"
        }
      ],
      "purl": "pkg:npm/atob@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atob/-/atob-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atob/-/atob-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae28a0d72f93bf22422a18a2e379993112dec8e8"
        }
      ],
      "purl": "pkg:npm/use@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use/-/use-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use/-/use-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-cache",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b9190a4f913354694840859f8a8f7084d8822264"
        }
      ],
      "purl": "pkg:npm/lazy-cache@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-cache@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-getter",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d769c182c9d5a51f409145f2fba82e5e86e80376"
        }
      ],
      "purl": "pkg:npm/set-getter@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-getter/-/set-getter-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-getter@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-getter/-/set-getter-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15358bee4a2c83bd76377ba1dc049d0f18837aae"
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-not",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42f83e39771622df826b02af176525d6a5f157f9"
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-not@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanomatch",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff995db27caeaef130ef0369c4b1608d5bc12ccb5ae379e21183b2d022789ed71849bc7a6ee81151341e15be0147f59a9c42f5a37690807b952c741a07ab4eaa"
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanomatch@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-odd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b8a932eb028b3775c39bb09e91767accdb69088"
        }
      ],
      "purl": "pkg:npm/is-odd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-odd/-/is-odd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-odd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-odd/-/is-odd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "310db70f742d259a16a369202b51af84233310d9"
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fined",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b37dc844b76a2f5e7081e884f7c0ae344f153476"
        }
      ],
      "purl": "pkg:npm/fined@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fined/-/fined-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fined@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fined/-/fined-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flagged-respawn",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e79ae9b2eb38bf86b3bb56bf3e0a56aa5fcabd7"
        }
      ],
      "purl": "pkg:npm/flagged-respawn@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flagged-respawn@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-iterator",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57bef5dc85d23923ba23767324d8e8f8f3d9694b"
        }
      ],
      "purl": "pkg:npm/make-iterator@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-iterator/-/make-iterator-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-iterator@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-iterator/-/make-iterator-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "orchestrator",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14e7e9e2764f7315fbac184e506c7aa6df94ad7e"
        }
      ],
      "purl": "pkg:npm/orchestrator@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/orchestrator@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e177206c3c80837d85632e8b9359dfe8b2f6eaf"
        }
      ],
      "purl": "pkg:npm/end-of-stream@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2e261557ce4c314ec8304f3fa82663e4297ca20"
        }
      ],
      "purl": "pkg:npm/once@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sequencify",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "90cff19d02e07027fd767f5ead3e7b95d1e7380c"
        }
      ],
      "purl": "pkg:npm/sequencify@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sequencify@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-consume",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a41ead1a6d6081ceb79f65b061901b6d8f3d1d0f"
        }
      ],
      "purl": "pkg:npm/stream-consume@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-consume@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tildify",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcec03f55dca9b7aa3e5b04f21817eb56e63588a"
        }
      ],
      "purl": "pkg:npm/tildify@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tildify/-/tildify-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tildify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tildify/-/tildify-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8flags",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aab1a1fa30d45f88dd321148875ac02c0b55e5b4"
        }
      ],
      "purl": "pkg:npm/v8flags@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8flags@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b5be23a32b63a7c9deb8d0f28d485724a3df190"
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-fs",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a6851ce1cac1c1cea5fe86c0931d620c2cfa9e6"
        }
      ],
      "purl": "pkg:npm/vinyl-fs@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-fs@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c656051e9817d9ff08ed881477f3fe4019f3ef7d"
        }
      ],
      "purl": "pkg:npm/defaults@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-stream",
      "version": "3.1.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9170a5f12b790306fdfe598f313f8f7954fd143b"
        }
      ],
      "purl": "pkg:npm/glob-stream@3.1.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-stream@3.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob2base",
      "version": "0.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d419b3e28f12e83a362164a277055922c9c0d56"
        }
      ],
      "purl": "pkg:npm/glob2base@0.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob2base@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-index",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "675d358b2ca3892d795a1ab47232f8b6e2e0dde4"
        }
      ],
      "purl": "pkg:npm/find-index@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-index@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ordered-read-streams",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd565a9af8eb4473ba69b6ed8a34352cb552f126"
        }
      ],
      "purl": "pkg:npm/ordered-read-streams@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ordered-read-streams@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d59a4a75427447d9aa6c91e70263f8d26a4b104b"
        }
      ],
      "purl": "pkg:npm/unique-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-watcher",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b95b4a8df74b39c83298b0c05c978b4d9a3b710b"
        }
      ],
      "purl": "pkg:npm/glob-watcher@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-watcher@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gaze",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40b709537d24d1d45767db5a908689dfe69ac44f"
        }
      ],
      "purl": "pkg:npm/gaze@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gaze@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globule",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9c8edde1da79d125a151b79533b978676346ae5"
        }
      ],
      "purl": "pkg:npm/globule@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globule@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.1.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d29e0a055dea5138f4d07ed40e8982e83c2066cd"
        }
      ],
      "purl": "pkg:npm/glob@3.1.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.1.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/configParser.js",
            "line": 3
          },
          {
            "location": "website/run-tests.js",
            "line": 3
          },
          {
            "location": "lib/configParser.ts",
            "line": 1
          },
          {
            "location": "lib/configParser.ts",
            "line": 73
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15a4806a57547cb2d2dbf27f42e89a8c3451b364"
        }
      ],
      "purl": "pkg:npm/graceful-fs@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca4309dadee6b54cc0b8d247e8d7c7a0975bdc9b"
        }
      ],
      "purl": "pkg:npm/inherits@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f57560c83b59fc270bd3d561b690043430e2551"
        }
      ],
      "purl": "pkg:npm/lodash@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "3.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7613c778a1afea62f25c630a086d7f3acbbdd818"
        }
      ],
      "purl": "pkg:npm/graceful-fs@3.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@3.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.11.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natives",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1e45ac67f2eff8c0df2d1a4865736720c30bce2cc2d43149f82184dec4c81677e2f25037de5d5924db281047486f2076c9417807ba389ade2794503c0d1a410"
        }
      ],
      "purl": "pkg:npm/natives@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natives/-/natives-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natives@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natives/-/natives-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85b8862f3844b5a6d5ec8467a93598173a36f794"
        }
      ],
      "purl": "pkg:npm/strip-bom@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59bfb50cd905f60d7c394cd3d9acaab4e6ad934e"
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f356c87a550a255461f36bbeb2a5ba8bf784847"
        }
      ],
      "purl": "pkg:npm/vinyl@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6126a90ad4f72dbf5acdb243cc37724fe93fc1f"
        }
      ],
      "purl": "pkg:npm/clone@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-concat",
      "version": "2.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633d16c95d88504628ad02665663cee5a4793353"
        }
      ],
      "purl": "pkg:npm/gulp-concat@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-concat/-/gulp-concat-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-concat@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-concat/-/gulp-concat-2.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-concat"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-with-sourcemaps",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62d9d2d15118f9ed8a873b1ecbfea6adaf44a0cea1ff9831682d1ede6707a40e727c3c5a7e1ca0cad3667095a876f520c97cd288be4c4a43cee9b40681f9621f"
        }
      ],
      "purl": "pkg:npm/concat-with-sourcemaps@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-with-sourcemaps@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "021f9c2cf951d6b939943c89eb5ee5add4fd924c"
        }
      ],
      "purl": "pkg:npm/vinyl@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d217d1e961118e3ac9a4b8bba3285553bf647cdb"
        }
      ],
      "purl": "pkg:npm/clone@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cloneable-readable",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6290d413f217a61232f95e458ff38418cfb0117"
        }
      ],
      "purl": "pkg:npm/cloneable-readable@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cloneable-readable@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-connect",
      "version": "2.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14ae7173328b691252b01fc1930a39cbb24fb33c"
        }
      ],
      "purl": "pkg:npm/gulp-connect@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-connect/-/gulp-connect-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-connect@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-connect/-/gulp-connect-2.3.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-connect"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "2.30.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8da9bcbe8a054d3d318d74dfec903b5c39a1b609"
        }
      ],
      "purl": "pkg:npm/connect@2.30.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-2.30.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@2.30.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-2.30.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "basic-auth-connect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fdb0b43962ca7b40456a7c2bb48fe173da2d2122"
        }
      ],
      "purl": "pkg:npm/basic-auth-connect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/basic-auth-connect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.13.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c08cf330c3358e151016a05746f13f029c97fa97"
        }
      ],
      "purl": "pkg:npm/body-parser@1.13.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.13.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.13.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.13.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 4
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac93c410e2ffc9cc7cf4b464b38289067f5e47b4"
        }
      ],
      "purl": "pkg:npm/bytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f87057e995b1a1f6ae6a4960664137bc56f039da"
        }
      ],
      "purl": "pkg:npm/debug@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9cd13c03adbff25b65effde7ce864ee952017098"
        }
      ],
      "purl": "pkg:npm/ms@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80aec64c9d6d97e65cc2a9caa93c0aa6abf73aaa"
        }
      ],
      "purl": "pkg:npm/depd@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "197e22cdebd4198585e8694ef6786197b91ed942"
        }
      ],
      "purl": "pkg:npm/http-errors@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2ecb42fd294744922209a2e7c404dac8793d8ade"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c31d9b74ec27df75e543a86c78728ed8d4623607"
        }
      ],
      "purl": "pkg:npm/qs@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "adfeace2e4fb3098058014d08c072dcc59758774"
        }
      ],
      "purl": "pkg:npm/raw-body@2.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d97196f9d5baf7f6935e25985549edd2a6c2339"
        }
      ],
      "purl": "pkg:npm/bytes@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f88aba4ab0b1508e8312acc39345f36e992e2f2"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cab10fb4909e441c82842eafe1ad646c81804410"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09d7a393f03e995a79f8af857b70a9e0ab16557a"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.30.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "74c643da2dd9d6a45399963465b26d5ca7d71f01"
        }
      ],
      "purl": "pkg:npm/mime-db@1.30.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.30.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b03b8d86e6f8ad29683cba8df91ddc6ffc77b395"
        }
      ],
      "purl": "pkg:npm/compression@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5f1f3928c6d95fd96558c36ec3d9d0de4a6ecea"
        }
      ],
      "purl": "pkg:npm/accepts@1.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.2.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "269d5c476810ec92edbe7b6c2f28316384f9a7e8"
        }
      ],
      "purl": "pkg:npm/negotiator@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c59a5c99db76767e9876500e271ef63b3493bd66"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "928f5d0f470d49342651ea6794b0857c100693f7"
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "99e4981566a286118dfb2b817357df7993376d10"
        }
      ],
      "purl": "pkg:npm/vary@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-timeout",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de9a5ec61e33a12b6edaab7b5f062e98c599b88e"
        }
      ],
      "purl": "pkg:npm/connect-timeout@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.6.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-timeout@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e734a5c1417fce472d5aef82c381cabb64d1a435"
        }
      ],
      "purl": "pkg:npm/cookie@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-parser",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d755570fb5d17890771227a02314d9be7cf8356"
        }
      ],
      "purl": "pkg:npm/cookie-parser@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-parser@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "csurf",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23f2a13bf1d8fce1d0c996588394442cba86a56a"
        }
      ],
      "purl": "pkg:npm/csurf@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csurf/-/csurf-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csurf@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csurf/-/csurf-1.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csrf",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b61120ddceeafc91e76ed5313bb5c0b2667b710a"
        }
      ],
      "purl": "pkg:npm/csrf@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csrf/-/csrf-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csrf@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csrf/-/csrf-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rndm",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f33fe9cfb52bbfd520aa18323bc65db110a1b76c"
        }
      ],
      "purl": "pkg:npm/rndm@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rndm/-/rndm-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rndm@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rndm/-/rndm-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsscmp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7dc4a33af71581ab4337da91d85ca5427ebd9a97"
        }
      ],
      "purl": "pkg:npm/tsscmp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsscmp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-safe",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ad6f38368c6d4c8c75ec17623fb79aa1d071d81"
        }
      ],
      "purl": "pkg:npm/uid-safe@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-safe@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "random-bytes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f68a1dc0ae58bd3fb95848c30324db75d64360b"
        }
      ],
      "purl": "pkg:npm/random-bytes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/random-bytes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errorhandler",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b7b70ed8f359e9db88092f2d20c0f831420ad83f"
        }
      ],
      "purl": "pkg:npm/errorhandler@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errorhandler@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86246758c7dd6d21a6474ff084a4740ec05eb21f"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express-session",
      "version": "1.11.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5cc98f3f5ff84ed835f91cbf0aabd0c7107400af"
        }
      ],
      "purl": "pkg:npm/express-session@1.11.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express-session/-/express-session-1.11.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express-session@1.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express-session/-/express-session-1.11.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "crc",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa622e1bc388bf257309082d6b65200ce67090ba"
        }
      ],
      "purl": "pkg:npm/crc@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crc/-/crc-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crc/-/crc-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-safe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7f3c6ca64a1f6a5d04ec0ef3e4c3d5367317137"
        }
      ],
      "purl": "pkg:npm/uid-safe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-safe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-url",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "199fd661702a0e7b7dcae6e0698bb089c52f6d78"
        }
      ],
      "purl": "pkg:npm/base64-url@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-url@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0294fb922bb9375153541c4f7096231f287c8af8"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "965a52d9e8d05d2b857548541fb89b53a2497d9b"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d77d32fa98e38c2f41ae85e9278e0e0e6ba1022c"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "651f838e22424e7566de161d8358caa199f83d4f"
        }
      ],
      "purl": "pkg:npm/fresh@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "method-override",
      "version": "2.3.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e3daf8d5dee10dd2dce7d4ae88d62bbee77476b4"
        }
      ],
      "purl": "pkg:npm/method-override@2.3.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/method-override/-/method-override-2.3.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/method-override@2.3.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/method-override/-/method-override-2.3.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "morgan",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fd818398c6819cba28a7cd6664f292fe1c0bbf2"
        }
      ],
      "purl": "pkg:npm/morgan@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/morgan@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "basic-auth",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "030935b01de7c9b94a824b29f3fccb750d3a5290"
        }
      ],
      "purl": "pkg:npm/basic-auth@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/basic-auth@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multiparty",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35de6804dc19643e5249f3d3e3bdc6c8ce301d3f"
        }
      ],
      "purl": "pkg:npm/multiparty@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multiparty@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-counter",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ded266556319c8b0e222812b9cf3b26fa7d947de"
        }
      ],
      "purl": "pkg:npm/stream-counter@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-counter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ebc8a4a8619ff0b8a81ac1513c3434ff469fdb74"
        }
      ],
      "purl": "pkg:npm/pause@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pause/-/pause-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pause@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pause/-/pause-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "response-time",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffa71bab952d62f7c1d49b7434355fbc68dffc5a"
        }
      ],
      "purl": "pkg:npm/response-time@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/response-time/-/response-time-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/response-time@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/response-time/-/response-time-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-favicon",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd419e268de012ab72b319d337f2105013f9381f"
        }
      ],
      "purl": "pkg:npm/serve-favicon@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-favicon@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "03d30b5f67dd6e632d2945d30d6652731a34d5d8"
        }
      ],
      "purl": "pkg:npm/etag@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae25cf2512b3885a1d95d7f037868d8431124765"
        }
      ],
      "purl": "pkg:npm/ms@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a057fc6ee28dc63f64566e5fa57b111a86aecd2"
        }
      ],
      "purl": "pkg:npm/serve-index@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f3414f380321743bfc1042f9a83ff1d5824d464"
        }
      ],
      "purl": "pkg:npm/batch@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce5a6ecd3101fed5ec09827dac22a9c29bfb0535"
        }
      ],
      "purl": "pkg:npm/serve-static@1.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.10.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "765e7607c8055452bba6f0b052595350986036de"
        }
      ],
      "purl": "pkg:npm/send@0.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.13.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "115f9e3b6b3daf2959983cb38f149a2d40eb5d53"
        }
      ],
      "purl": "pkg:npm/mime@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6872823535c692e2c2a0103826afd82c2e0ff175"
        }
      ],
      "purl": "pkg:npm/range-parser@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dded45cc18256d51ed40aec142489d5c61026d28"
        }
      ],
      "purl": "pkg:npm/statuses@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vhost",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2fb1decd4c466aa88b0f9341af33dc1aff2478d5"
        }
      ],
      "purl": "pkg:npm/vhost@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vhost/-/vhost-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vhost@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vhost/-/vhost-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-livereload",
      "version": "0.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80157d1371c9f37cc14039ab1895970d119dc3bc"
        }
      ],
      "purl": "pkg:npm/connect-livereload@0.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.5.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-livereload@0.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
        }
      ],
      "purl": "pkg:npm/event-stream@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e56aa94c4c8055a16404a0674b78f215f7c8e194"
        }
      ],
      "purl": "pkg:npm/map-stream@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd0eea5e63a211dfff7eb0f091c4133e2d0dd28f"
        }
      ],
      "purl": "pkg:npm/split@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split/-/split-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split/-/split-0.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d5e433c185261dde623ca3f44c586bcf5c4ad14"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-lr",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3fdba802e5d56a33c2f6f10794b32e477ac729d"
        }
      ],
      "purl": "pkg:npm/tiny-lr@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tiny-lr/-/tiny-lr-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-lr@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tiny-lr/-/tiny-lr-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.14.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1015cb1fe2c443858259581db53332f8d0cf50f9"
        }
      ],
      "purl": "pkg:npm/body-parser@1.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.14.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 4
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd35464a403f6f9117c2de3609ecff9cae000588"
        }
      ],
      "purl": "pkg:npm/bytes@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9f31142af468cb72b25b30136ba2456834916be"
        }
      ],
      "purl": "pkg:npm/qs@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "websocket-driver",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0caf9d2d755d93aee049d4bdd0d3fe2cca2a24eb"
        }
      ],
      "purl": "pkg:npm/websocket-driver@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-driver@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "http-parser-js",
      "version": "0.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ea1a04fb64adff0242e9974f297dd4c3cad271e1"
        }
      ],
      "purl": "pkg:npm/http-parser-js@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-parser-js@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.4.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "websocket-extensions",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ea1d49cc5e60734f4c39ef4af62692717e2483d48ce823e1c655d777699d32362de782f4388efd5db47b79546c5f236ca3e72a8898f84e2b8be6221db131b1a"
        }
      ],
      "purl": "pkg:npm/websocket-extensions@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-extensions@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "livereload-js",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f5474fc57866bae18f8d9aa7d9872a1547370594e67cb0d94acc78e1e15bcb50b140099867ebc5eb5f90c583616132f48c26644eb85c5149ae7ad0409628132"
        }
      ],
      "purl": "pkg:npm/livereload-js@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/livereload-js/-/livereload-js-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/livereload-js@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/livereload-js/-/livereload-js-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d932e5c7ea411cca76a312d39a606200fd50cd9"
        }
      ],
      "purl": "pkg:npm/qs@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-less",
      "version": "1.3.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e129750f236693ead5b522af311cc33eeff1910e"
        }
      ],
      "purl": "pkg:npm/gulp-less@1.3.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-less/-/gulp-less-1.3.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-less@1.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-less/-/gulp-less-1.3.9.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-less"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f919a0099fe31f80fc5a1d0eb303161b394070c7"
        }
      ],
      "purl": "pkg:npm/convert-source-map@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "less",
      "version": "1.7.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f220cf7288a27eaca739df6e4808a2d4c0d5756"
        }
      ],
      "purl": "pkg:npm/less@1.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/less/-/less-1.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/less@1.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/less/-/less-1.7.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "2.2.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0590b5478b516c4903edc2d89bd3fdbdd286328c"
        }
      ],
      "purl": "pkg:npm/clean-css@2.2.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-2.2.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@2.2.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-2.2.23.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "175ad4b9317f3ff615f201c1e57224f55a3e91df"
        }
      ],
      "purl": "pkg:npm/commander@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.40.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dd670f696f1e6e842e66b4b5e839301ab9beb67"
        }
      ],
      "purl": "pkg:npm/request@2.40.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.40.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.40.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.40.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c57103f7a17fc037f02d7c2e64b602ea223f7d63"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d0e09c4921f94a27f63d3b49c5feff1ea4c5130"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91abd788aba9702b1aabfa8bc01031a2ac9e3b12"
        }
      ],
      "purl": "pkg:npm/form-data@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87cd491f9b46e4e2aeaca335416766885d2d1ed9"
        }
      ],
      "purl": "pkg:npm/hawk@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a636e9ded4efcefb19cef4947a3c67dfaee911b"
        }
      ],
      "purl": "pkg:npm/boom@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d322462badf07716ea7eb85baf88079cddce505"
        }
      ],
      "purl": "pkg:npm/hoek@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed91ff1f17ad13d3748288594f8a48a0d26f325c"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb885f18b0f3aad189f824862536bceeec750900"
        }
      ],
      "purl": "pkg:npm/sntp@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fbdac132559aa8323121e540779c0a012b27e66"
        }
      ],
      "purl": "pkg:npm/http-signature@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "559be18376d08a4ec4dbe80877d27818639b2df7"
        }
      ],
      "purl": "pkg:npm/asn1@0.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee74009413002d84cec7219c6ac811812e723160"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctype",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82c18c2461f74114ef16c135224ad0b9144ca12f"
        }
      ],
      "purl": "pkg:npm/ctype@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctype@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "995ae1392ab8affcbfcb2641dd054e943c0d5dce"
        }
      ],
      "purl": "pkg:npm/mime-types@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb540f93bb2b22a7d5941691a288d60e8ea9386e"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50a93e2b5af6691c31bcea5dae78ee6ea1903768"
        }
      ],
      "purl": "pkg:npm/qs@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringstream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e484cd4de5a0bbbee18e46307710a8a81621878"
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringstream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b618a5565b6dea90bf3425d04d55edc475a7561"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6373db76909fe570e08d73583365ed828a74eeeb"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bc146ca517c1471f5dacbe2571b2b7f9e3346"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7e8885f05e68851144b6e12a8f3678026bc4c54"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._objecttypes",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c0b7f69d98a1f76529f890b0cdb1b4dfec11c11"
        }
      ],
      "purl": "pkg:npm/lodash._objecttypes@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._objecttypes/-/lodash._objecttypes-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._objecttypes@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._objecttypes/-/lodash._objecttypes-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48dea46df8ff7632b10d706b8acb26591e2b3727"
        }
      ],
      "purl": "pkg:npm/lodash.keys@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isnative",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ea6404b784a7be836c7b57580e1cdf79b14832c"
        }
      ],
      "purl": "pkg:npm/lodash._isnative@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isnative/-/lodash._isnative-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isnative@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isnative/-/lodash._isnative-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash._shimkeys",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e9cc9666ff081f0b5a6c978b83e242e6949d203"
        }
      ],
      "purl": "pkg:npm/lodash._shimkeys@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._shimkeys/-/lodash._shimkeys-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._shimkeys@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._shimkeys/-/lodash._shimkeys-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isobject",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a2e47fe69953f1ee631a7eba1fe64d2d06558f5"
        }
      ],
      "purl": "pkg:npm/lodash.isobject@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isobject/-/lodash.isobject-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isobject@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isobject/-/lodash.isobject-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dfdd012eb9c700e2323fd334f38ac622ab372da7"
        }
      ],
      "purl": "pkg:npm/through2@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5cce7407baf642cba7becda568111c493f59665a"
        }
      ],
      "purl": "pkg:npm/xtend@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemaps-apply",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c5fcbd43e2f238423c2dc98bddd6f79b72bc345b"
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-markdown",
      "version": "1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37cdc61379fb039841fa6cab4984a8e79128a772"
        }
      ],
      "purl": "pkg:npm/gulp-markdown@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-markdown/-/gulp-markdown-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-markdown@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-markdown/-/gulp-markdown-1.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-markdown"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-clean-css",
      "version": "2.0.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c664d5e2f19faad7750d62e543b21d07f6aa3c8d"
        }
      ],
      "purl": "pkg:npm/gulp-clean-css@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-clean-css/-/gulp-clean-css-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-clean-css@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-clean-css/-/gulp-clean-css-2.0.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-clean-css"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "3.4.28",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf1945e82fc808f55695e6ddeaec01400efd03ff"
        }
      ],
      "purl": "pkg:npm/clean-css@3.4.28",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-3.4.28.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@3.4.28",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-3.4.28.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06be367febfda0c330aa1e2a072d3dc9762425d4"
        }
      ],
      "purl": "pkg:npm/commander@2.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-readlink",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725"
        }
      ],
      "purl": "pkg:npm/graceful-readlink@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-readlink@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-bufferstream",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0537869f580effa4ca45acb47579e4b9fe63081a"
        }
      ],
      "purl": "pkg:npm/vinyl-bufferstream@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-bufferstream/-/vinyl-bufferstream-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-bufferstream@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-bufferstream/-/vinyl-bufferstream-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bufferstreams",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfb1ad9568d3ba3cfe935ba9abdd952de88aab2a"
        }
      ],
      "purl": "pkg:npm/bufferstreams@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bufferstreams/-/bufferstreams-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bufferstreams@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bufferstreams/-/bufferstreams-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemaps-apply",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab6549d61d172c2b1b87be5c508d239c8ef87705"
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-rename",
      "version": "1.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ad4428763f05e2764dec1c67d868db275687817"
        }
      ],
      "purl": "pkg:npm/gulp-rename@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-rename@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-rename"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-replace",
      "version": "0.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e22bc9c03e9d051b32881cc589bd3e8c4e54168a"
        }
      ],
      "purl": "pkg:npm/gulp-replace@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-replace/-/gulp-replace-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-replace@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-replace/-/gulp-replace-0.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "gulp-replace"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/gulpfile.js",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.0.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "038bbb2ea9ea90385b26fbc1854d0b539f2abea3"
        }
      ],
      "purl": "pkg:npm/event-stream@3.0.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-stream/-/event-stream-3.0.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.0.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-stream/-/event-stream-3.0.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67097c601d697ce1368f418f06cd201cf0521a57"
        }
      ],
      "purl": "pkg:npm/split@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split/-/split-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split/-/split-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istextorbinary",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace19354d1a9a0173efeb1084ce0f87b0ad7decf"
        }
      ],
      "purl": "pkg:npm/istextorbinary@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istextorbinary@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binaryextensions",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e637488b35b58bda5f4774bf96a5212a8c90755"
        }
      ],
      "purl": "pkg:npm/binaryextensions@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binaryextensions@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "textextensions",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "65486393ee1f2bb039a60cbba05b0b68bd9501d2"
        }
      ],
      "purl": "pkg:npm/textextensions@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/textextensions/-/textextensions-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/textextensions@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/textextensions/-/textextensions-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replacestream",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e018d3a37724600ccd0c005990d8a21b7b54ff34"
        }
      ],
      "purl": "pkg:npm/replacestream@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replacestream/-/replacestream-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replacestream@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replacestream/-/replacestream-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine",
      "version": "2.3.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "febf0e4b4afff63c2d09211f077da0b859f5f191"
        }
      ],
      "purl": "pkg:npm/jasmine@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine/-/jasmine-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine/-/jasmine-2.3.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/frameworks/jasmine.js",
            "line": 59
          },
          {
            "location": "lib/frameworks/jasmine.js",
            "line": 59
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exit",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0632638f8d877cc82107d30a0fff1a17cba1cd0c"
        }
      ],
      "purl": "pkg:npm/exit@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exit@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-core",
      "version": "2.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ad772662b32d16c564ee25c863edae1d65a038f2"
        }
      ],
      "purl": "pkg:npm/jasmine-core@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-core@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.3.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jasmine-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma",
      "version": "0.12.37",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a9f7fdeccd69de2e835e04edbac2ecd3fa645e4"
        }
      ],
      "purl": "pkg:npm/karma@0.12.37",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma/-/karma-0.12.37.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma@0.12.37",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma/-/karma-0.12.37.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "karma"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "798e689778151c8076b4b360e5edd28cda2bb468"
        }
      ],
      "purl": "pkg:npm/chokidar@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1735ac82f254c7436388f1a963342377b12c7a86caffd7eae5703028b57251ec2d686591c236c7e96cac0c8d103752a6f9b45d5169eda89684ebe31a6af968c"
        }
      ],
      "purl": "pkg:npm/anymatch@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "2.3.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86677c97d1720b363431d04d0d15293bd38c1565"
        }
      ],
      "purl": "pkg:npm/micromatch@2.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@2.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf"
        }
      ],
      "purl": "pkg:npm/arr-diff@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53"
        }
      ],
      "purl": "pkg:npm/array-unique@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "1.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba77962e12dff969d6b76711e914b737857bf6a7"
        }
      ],
      "purl": "pkg:npm/braces@1.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@1.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-range",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a299effd335fe2721ebae8e257ec79644fc85337"
        }
      ],
      "purl": "pkg:npm/expand-range@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-range@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50b77dfd7e469bc7492470963699fe7a8485a723"
        }
      ],
      "purl": "pkg:npm/fill-range@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01fcbbb393463a548f2f466cce16dece49db908f"
        }
      ],
      "purl": "pkg:npm/is-number@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randomatic",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f92548cfc896da24392e01ace956749f5642e5a5e3b7c0394f44e4cc2c6286d73305345460adc88aa3596dcff03335392a1341f30f1eb9e5038be75374ea1a3"
        }
      ],
      "purl": "pkg:npm/randomatic@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomatic@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "preserve",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b"
        }
      ],
      "purl": "pkg:npm/preserve@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/preserve@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df07284e342a807cd733ac5af72411e581d1177b"
        }
      ],
      "purl": "pkg:npm/expand-brackets@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-posix-bracket",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4"
        }
      ],
      "purl": "pkg:npm/is-posix-bracket@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-posix-bracket@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1"
        }
      ],
      "purl": "pkg:npm/extglob@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac468177c4943405a092fc8f29760c6ffc6206c0"
        }
      ],
      "purl": "pkg:npm/is-extglob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-regex",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c1c4b9bee3e09725ddb106b75c1e301fe2f18b26"
        }
      ],
      "purl": "pkg:npm/filename-regex@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-regex@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863"
        }
      ],
      "purl": "pkg:npm/is-glob@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.omit",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a9c744829f39dbb858c76ca3579ae2a54ebd1fa"
        }
      ],
      "purl": "pkg:npm/object.omit@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.omit@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5265c681a4f294dabbf17c9509b6763aa84510ce"
        }
      ],
      "purl": "pkg:npm/for-own@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-glob",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c"
        }
      ],
      "purl": "pkg:npm/parse-glob@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-glob@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-base",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4"
        }
      ],
      "purl": "pkg:npm/glob-base@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-base@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81383d72db054fcccf5336daa902f182f6edbb28"
        }
      ],
      "purl": "pkg:npm/glob-parent@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-dotfile",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6a2f32ffd2dfb04f5ca25ecd0f6b83cf798a1e1"
        }
      ],
      "purl": "pkg:npm/is-dotfile@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-dotfile@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-cache",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d5219c2d0a3902f5882f5a4a4ce79079ac184161166101a25b81c1585d7b079db67d51923d9e7556619a41942aaff61a36799af23e75ab646b0e74fc1559759"
        }
      ],
      "purl": "pkg:npm/regex-cache@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-cache@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-equal-shallow",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534"
        }
      ],
      "purl": "pkg:npm/is-equal-shallow@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-equal-shallow@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-primitive",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "207bab91638499c07b2adf240a41a87210034575"
        }
      ],
      "purl": "pkg:npm/is-primitive@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-primitive@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46aa1751fb6a2f93ee5e689bb1087d4b14c6c205"
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ed0ad060df3073300c48440373f72d1cc642d78"
        }
      ],
      "purl": "pkg:npm/readdirp@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "168a4701756b6a7f51a12ce0c97bfa28c084ed63"
        }
      ],
      "purl": "pkg:npm/colors@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "0.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14ba0ceaa2197f89fa30dea9e7b09e19cd93c22f"
        }
      ],
      "purl": "pkg:npm/http-proxy@0.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-0.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@0.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-0.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utile",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "930c88e99098d6220834c356cbd9a770522d90d7"
        }
      ],
      "purl": "pkg:npm/utile@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utile/-/utile-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utile@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utile/-/utile-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "i",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d96c92732076f072711b6b10fd7d4f65ad8ee23d"
        }
      ],
      "purl": "pkg:npm/i@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/i/-/i-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/i@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/i/-/i-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ncp",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "abcc6cbd3ec2ed2a729ff6e7c1fa8f01784a8574"
        }
      ],
      "purl": "pkg:npm/ncp@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ncp/-/ncp-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ncp@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ncp/-/ncp-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log4js",
      "version": "0.6.38",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c494116695d6fb25480943d3fc872e662a522fd"
        }
      ],
      "purl": "pkg:npm/log4js@0.6.38",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log4js@0.6.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "0.9.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3bab0444e49b55fbbc157424dbd41aa375a51a76"
        }
      ],
      "purl": "pkg:npm/socket.io@0.9.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-0.9.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@0.9.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-0.9.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64id",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "02ce0fdeee0cef4f40080e1e73e834f0b1bfce3f"
        }
      ],
      "purl": "pkg:npm/base64id@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64id/-/base64id-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64id@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64id/-/base64id-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "policyfile",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6b82ead98ae79ebe228e2daf5903311ec982e4d"
        }
      ],
      "purl": "pkg:npm/policyfile@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/policyfile/-/policyfile-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/policyfile@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/policyfile/-/policyfile-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-client",
      "version": "0.9.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4da7515c5e773041d1b423970415bcc430f35fc6"
        }
      ],
      "purl": "pkg:npm/socket.io-client@0.9.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-0.9.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-client@0.9.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-0.9.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "active-x-obfuscator",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "089b89b37145ff1d9ec74af6530be5526cae1f1a"
        }
      ],
      "purl": "pkg:npm/active-x-obfuscator@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/active-x-obfuscator/-/active-x-obfuscator-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/active-x-obfuscator@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/active-x-obfuscator/-/active-x-obfuscator-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zeparser",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "03726561bc268f2e5444f54c665b7fd4a8c029e2"
        }
      ],
      "purl": "pkg:npm/zeparser@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zeparser/-/zeparser-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zeparser@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zeparser/-/zeparser-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b542c2c76f78efb34b200b20177634330ff702b6"
        }
      ],
      "purl": "pkg:npm/uglify-js@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "0.4.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "787a6154414f3c99ed83c5772153b20feb0cec32"
        }
      ],
      "purl": "pkg:npm/ws@0.4.32",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-0.4.32.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@0.4.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-0.4.32.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d121bbae860d9992a3d517ba96f56588e47c6781"
        }
      ],
      "purl": "pkg:npm/commander@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae24f8850818d662fcab5acf7f3b95bfaa2ccf38"
        }
      ],
      "purl": "pkg:npm/nan@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "options",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec22d312806bb53e731773e7cdaefcf1c643128f"
        }
      ],
      "purl": "pkg:npm/options@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/options/-/options-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/options@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/options/-/options-0.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "320b5a52d83abb5978d81a3e887d4aefb15a6164"
        }
      ],
      "purl": "pkg:npm/tinycolor@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinycolor/-/tinycolor-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinycolor/-/tinycolor-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlhttprequest",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01453a1d9bed1e8f172f6495bbf4c8c426321500"
        }
      ],
      "purl": "pkg:npm/xmlhttprequest@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlhttprequest/-/xmlhttprequest-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlhttprequest@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlhttprequest/-/xmlhttprequest-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "redis",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee57b7a44d25ec1594e44365d8165fa7d1d4811a"
        }
      ],
      "purl": "pkg:npm/redis@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redis/-/redis-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redis@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redis/-/redis-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "useragent",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf593ef4f2d175875e8bb658ea92e18a4fd06d8e"
        }
      ],
      "purl": "pkg:npm/useragent@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/useragent/-/useragent-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/useragent@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/useragent/-/useragent-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c658619becf14031d0d0b594b16042ce4dc063d"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-chrome-launcher",
      "version": "0.1.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ac0e22e573650f6541312fdca795c3824ccf962"
        }
      ],
      "purl": "pkg:npm/karma-chrome-launcher@0.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-0.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-chrome-launcher@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-0.1.12.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "karma-chrome-launcher"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-jasmine",
      "version": "0.1.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30545057698ebdcbc63132d47be125b75b2fbc55"
        }
      ],
      "purl": "pkg:npm/karma-jasmine@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-jasmine@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "website/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-0.1.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "karma-jasmine"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "website/package-lock.json"
              }
            ],
            "concludedValue": "website/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/karma.conf.js"
          }
        ]
      }
    },
    {
      "group": "@angular",
      "name": "common",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5a77a7bea1943296cff08a9ff60ebcbfb58ad8b"
        }
      ],
      "purl": "pkg:npm/%40angular/common@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/common/-/common-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/common@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/common/-/common-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/common"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 11
          },
          {
            "location": "testapp/ng1/form/form.html",
            "line": 7
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 8
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 15
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 22
          },
          {
            "location": "testapp/ng2/app/async/async.component.html",
            "line": 29
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6946af2d1d651a7b1863b531d6e5afa41aa44eac"
        }
      ],
      "purl": "pkg:npm/tslib@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@angular",
      "name": "compiler",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60551454f2d8bac9802203d9de7e1efb9bc7d02b"
        }
      ],
      "purl": "pkg:npm/%40angular/compiler@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/compiler/-/compiler-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/compiler@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/compiler/-/compiler-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/compiler"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/main.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "core",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48e0c693148f1c96c1526c9be97b59e5299337c5"
        }
      ],
      "purl": "pkg:npm/%40angular/core@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/core/-/core-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/core@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/core/-/core-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/core,Component,@angular/core/Component,NgModule,@angular/core/NgModule,NgZone,@angular/core/NgZone,Directive,@angular/core/Directive,ElementRef,@angular/core/ElementRef,Injector,@angular/core/Injector,forwardRef,@angular/core/forwardRef"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/app.component.js",
            "line": 11
          },
          {
            "location": "testapp/ng2/app/app.module.js",
            "line": 11
          },
          {
            "location": "testapp/ng2/app/async/async.component.js",
            "line": 11
          },
          {
            "location": "testapp/ng2/app/home/home.component.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.js",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 9
          },
          {
            "location": "testapp/upgrade/app/module.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/ng1.js",
            "line": 33
          },
          {
            "location": "testapp/upgrade/app/ng2.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.js",
            "line": 13
          },
          {
            "location": "testapp/ng2/app/app.component.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/app.component.ts",
            "line": 3
          },
          {
            "location": "testapp/ng2/app/app.module.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/app.module.ts",
            "line": 8
          },
          {
            "location": "testapp/ng2/app/async/async.component.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/async/async.component.ts",
            "line": 3
          },
          {
            "location": "testapp/ng2/app/home/home.component.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/home/home.component.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 8
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 24
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 10
          },
          {
            "location": "testapp/upgrade/app/ng1.ts",
            "line": 20
          },
          {
            "location": "testapp/upgrade/app/ng1.ts",
            "line": 22
          },
          {
            "location": "testapp/upgrade/app/ng2.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/ng2.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 7
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 9
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "http",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0610b79f6da9a4fc8c782cb8de2a0b20dece6921"
        }
      ],
      "purl": "pkg:npm/%40angular/http@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/http/-/http-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/http@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/http/-/http-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "http"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/driverProviderAttachSession.js",
            "line": 5
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "platform-browser",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e62a118ca08a74cbcff75fa6ff500e13f464e6b"
        }
      ],
      "purl": "pkg:npm/%40angular/platform-browser@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/platform-browser@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/platform-browser,BrowserModule,@angular/platform-browser/BrowserModule,@angular/platform-browser/animations,BrowserAnimationsModule,@angular/platform-browser/animations/BrowserAnimationsModule"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/app.module.js",
            "line": 12
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 12
          },
          {
            "location": "testapp/upgrade/app/module.js",
            "line": 12
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.js",
            "line": 12
          },
          {
            "location": "testapp/ng2/app/app.module.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.js",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 14
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "animations",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3510375f5b5e04f3e7a94d972ae6690e177780c8"
        }
      ],
      "purl": "pkg:npm/%40angular/animations@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/animations/-/animations-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/animations@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/animations/-/animations-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/animations/browser,@angular/animations"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 13
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ngfactory.js",
            "line": 15
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "platform-browser-dynamic",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "412b3147db3771b2f6cb48d382f762d6e98186e2"
        }
      ],
      "purl": "pkg:npm/%40angular/platform-browser-dynamic@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/platform-browser-dynamic@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/platform-browser-dynamic,platformBrowserDynamic,@angular/platform-browser-dynamic/platformBrowserDynamic"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/main.js",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/main.js",
            "line": 2
          },
          {
            "location": "testapp/ng2/app/main.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/main.ts",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 6
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "router",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0720075aef093082d9b30c36efe1d71e8cacc9e0"
        }
      ],
      "purl": "pkg:npm/%40angular/router@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/router/-/router-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/router@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/router/-/router-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/router,Routes,@angular/router/Routes,RouterModule,@angular/router/RouterModule"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/ng2/app/app.routes.js",
            "line": 2
          },
          {
            "location": "testapp/ng2/app/app.routes.ts",
            "line": 1
          },
          {
            "location": "testapp/ng2/app/app.routes.ts",
            "line": 10
          },
          {
            "location": "testapp/ng2/app/app.component.html",
            "line": 4
          },
          {
            "location": "testapp/ng2/app/app.component.html",
            "line": 5
          },
          {
            "location": "testapp/ng2/app/app.component.html",
            "line": 7
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@angular",
      "name": "upgrade",
      "version": "5.0.0-beta.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab1a701eb26088f82e7f83d7e9cbaa97f8e6d60f"
        }
      ],
      "purl": "pkg:npm/%40angular/upgrade@5.0.0-beta.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@angular/upgrade/-/upgrade-5.0.0-beta.7.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@angular/upgrade@5.0.0-beta.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@angular/upgrade/-/upgrade-5.0.0-beta.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@angular/upgrade/static,downgradeModule,@angular/upgrade/static/downgradeModule,downgradeComponent,@angular/upgrade/static/downgradeComponent,UpgradeModule,@angular/upgrade/static/UpgradeModule,UpgradeComponent,@angular/upgrade/static/UpgradeComponent,@angular/upgrade,UpgradeAdapter,@angular/upgrade/UpgradeAdapter"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/upgrade/app/downgrade/main.js",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.js",
            "line": 5
          },
          {
            "location": "testapp/upgrade/app/main.js",
            "line": 3
          },
          {
            "location": "testapp/upgrade/app/module.js",
            "line": 13
          },
          {
            "location": "testapp/upgrade/app/ng1.js",
            "line": 34
          },
          {
            "location": "testapp/upgrade/app/downgrade/main.ts",
            "line": 1
          },
          {
            "location": "testapp/upgrade/app/downgrade/main.ts",
            "line": 10
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/downgrade/ng2.ts",
            "line": 46
          },
          {
            "location": "testapp/upgrade/app/main.ts",
            "line": 2
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 4
          },
          {
            "location": "testapp/upgrade/app/module.ts",
            "line": 29
          },
          {
            "location": "testapp/upgrade/app/ng1.ts",
            "line": 21
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.js",
            "line": 11
          },
          {
            "location": "testapp/upgrade/app/no_static/upgrader.ts",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@types",
      "name": "angular",
      "version": "1.6.39",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d18f6e9fa00c186e33b09c64a921a634e7e8d1c597af1d6c33712ad022c2608795eba2c6eee1f5fdf7ea1b247e181454bcf84918470b12a5fdafa5575d48d57"
        }
      ],
      "purl": "pkg:npm/%40types/angular@1.6.39",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/angular/-/angular-1.6.39.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/angular@1.6.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/angular/-/angular-1.6.39.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/angular"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "core-js",
      "version": "0.9.43",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "635d5d92d049e58c0a5d7f037c749bf55eac8572921cde4fd9444f64b1d34635f73ac3bfbbcbb59199d226fb2e487ef869383c7f964a72911e09d20939c0641e"
        }
      ],
      "purl": "pkg:npm/%40types/core-js@0.9.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/core-js/-/core-js-0.9.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/core-js@0.9.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/core-js/-/core-js-0.9.43.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/core-js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "6.0.93",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "450a2be3a90283b6c5970c2b5c986877009338a9835ba9c2ac5d11498a8ca4f9a0d336284d6de08248657315c5cb50ff63c824b85c211081669ba76464fc352b"
        }
      ],
      "purl": "pkg:npm/%40types/node@6.0.93",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-6.0.93.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@6.0.93",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-6.0.93.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4de911e667b0eae9124e34254b53aea6fc618d3e"
        }
      ],
      "purl": "pkg:npm/core-js@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reflect-metadata",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64f8a41974e4f5a5aa9978dac54cfd442dc2f1d5"
        }
      ],
      "purl": "pkg:npm/reflect-metadata@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reflect-metadata@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs",
      "version": "5.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d2362fb2f8ff6cb3e119b95d0670822a3d42b4ec311a31152d2c9bdd72f33216373d762cee0e37ab7be03857b26b2c69e6f6209cfa76a057fe1074c4e4a82e0"
        }
      ],
      "purl": "pkg:npm/rxjs@5.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rxjs/-/rxjs-5.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rxjs@5.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rxjs/-/rxjs-5.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "symbol-observable",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "750a2277db6a43eba8b4686e4ca118d755f8c61c9878f567a864a84a6dce18a87613c2d9e913d42e9d6e5d372d937dc8784465ad1258a15481825b0bd3917953"
        }
      ],
      "purl": "pkg:npm/symbol-observable@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/symbol-observable/-/symbol-observable-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol-observable@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/symbol-observable/-/symbol-observable-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "systemjs",
      "version": "0.19.27",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f1740d565ce64371ac0de7072a4d1e5471ba7ba2"
        }
      ],
      "purl": "pkg:npm/systemjs@0.19.27",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/systemjs/-/systemjs-0.19.27.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/systemjs@0.19.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/systemjs/-/systemjs-0.19.27.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "when",
      "version": "3.7.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c7130b6a7ea04693e842cdc9e7a1f2aa39a39f82"
        }
      ],
      "purl": "pkg:npm/when@3.7.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/when/-/when-3.7.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/when@3.7.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/when/-/when-3.7.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zone.js",
      "version": "0.8.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92728e050334a1e6b7ff1f697720ee0e2ed18710e526138891e8b15d28932962e0b382e92b7ee205cfb51da1f0ce57221d4293d7bd82ca62452a8f17821fb8e1"
        }
      ],
      "purl": "pkg:npm/zone.js@0.8.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zone.js/-/zone.js-0.8.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zone.js@0.8.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zone.js/-/zone.js-0.8.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concurrently",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bad248e0bb129fb1621768903a6311d45d56895a"
        }
      ],
      "purl": "pkg:npm/concurrently@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concurrently/-/concurrently-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concurrently@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concurrently/-/concurrently-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "2.9.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1fc3a6b1685267dc121b5ec89b32ce069d81ab7d"
        }
      ],
      "purl": "pkg:npm/bluebird@2.9.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@2.9.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "0.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "663b3a648b68b55d04690d49167aa837858f2174"
        }
      ],
      "purl": "pkg:npm/chalk@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "built/logger.js",
            "line": 11
          },
          {
            "location": "lib/logger.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaecbf66cd706882760b2f4691582b8f55d7a7de"
        }
      ],
      "purl": "pkg:npm/ansi-styles@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84f265aae8c0e6a88a12d7022894b7568894c62e"
        }
      ],
      "purl": "pkg:npm/has-ansi@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d8e946967a3d8143f93e24e298525fc1b2235f9"
        }
      ],
      "purl": "pkg:npm/ansi-regex@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25f48ea22ca79187f3174a4db8759347bb126220"
        }
      ],
      "purl": "pkg:npm/strip-ansi@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d92de2694eb3f67323973d7ae3d8b55b4c22190a"
        }
      ],
      "purl": "pkg:npm/supports-color@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9df7e52fb2a0cb0fb89058ee80c3104225f37e1d"
        }
      ],
      "purl": "pkg:npm/commander@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd67f96c07efb6303b7fe94c1e979f88478e0a39"
        }
      ],
      "purl": "pkg:npm/cross-spawn@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "website/docgen/processors/add-links.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/add-toc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-jsdoc.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/filter-promise.js",
            "line": 1
          },
          {
            "location": "website/docgen/processors/tag-fixer.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "moment",
      "version": "2.19.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d711530249d22df738ec32311c351b9c9582f94c205b10139b299ac483d0a66321ecb066ed96f0544b2ebac86ac0bd866195348e27b8c4ef932b8e2124f8cd49"
        }
      ],
      "purl": "pkg:npm/moment@2.19.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/moment/-/moment-2.19.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/moment@2.19.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/moment/-/moment-2.19.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "2.3.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14f950a4217d7e35daa71bbcbe58eff68ea4b2b7"
        }
      ],
      "purl": "pkg:npm/rx@2.3.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-2.3.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@2.3.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-2.3.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.13.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddb2f1fb4502bf33598d2b032b037960ca6c80a3"
        }
      ],
      "purl": "pkg:npm/express@4.13.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.13.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.13.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.13.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4284fe6ae0630874639e44e80a418c2934135e9e"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2169cf7538e1b0cc87fb88e1502d8474bbf79864"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d40a82f801fc355567d2ecb65efe3f077f121c5"
        }
      ],
      "purl": "pkg:npm/proxy-addr@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fa78cf301b825c78abc3042d812723049ea23c7"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "518f921aeb0560aec7dcab2990b14cf6f3cce5de"
        }
      ],
      "purl": "pkg:npm/send@0.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b433b4724e71fd8551d9885174851c5fc377e2c9"
        }
      ],
      "purl": "pkg:npm/destroy@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5783b4e1c459f06fa5ca27f991f3d06e7a310359"
        }
      ],
      "purl": "pkg:npm/depd@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lite-server",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4194ed1a9fa3210c6ab15882e1413a31a572689"
        }
      ],
      "purl": "pkg:npm/lite-server@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lite-server/-/lite-server-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lite-server@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lite-server/-/lite-server-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-sync",
      "version": "2.18.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa176b9a0b21546c307a8813fdb74e2a4643c55c6a885e3ef6689b683780c6f0c17a852d760001939c7b610d4a09c2d172101fbfc015b69f4db884e5e424cdaa"
        }
      ],
      "purl": "pkg:npm/browser-sync@2.18.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-sync/-/browser-sync-2.18.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-sync@2.18.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-sync/-/browser-sync-2.18.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-sync-client",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec1ad69a49c2e2d4b645b18b1c06c29b3d9af8eb"
        }
      ],
      "purl": "pkg:npm/browser-sync-client@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-sync-client/-/browser-sync-client-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-sync-client@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-sync-client/-/browser-sync-client-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-sync-ui",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "640a537c180689303d5be92bc476b9ebc441c0bc"
        }
      ],
      "purl": "pkg:npm/browser-sync-ui@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-sync-ui/-/browser-sync-ui-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-sync-ui@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-sync-ui/-/browser-sync-ui-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each-series",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7617c1917401fd8ca4a28aadce3dbae98afeb432"
        }
      ],
      "purl": "pkg:npm/async-each-series@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each-series/-/async-each-series-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each-series@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each-series/-/async-each-series-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-history-api-fallback",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b06873934bc5e344fef611a196a6faae0aee015a"
        }
      ],
      "purl": "pkg:npm/connect-history-api-fallback@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.5.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-history-api-fallback@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "immutable",
      "version": "3.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "200807f11ab0f72710ea485542de088075f68cd2"
        }
      ],
      "purl": "pkg:npm/immutable@3.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/immutable/-/immutable-3.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immutable@3.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/immutable/-/immutable-3.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "server-destroy",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f13bf928e42b9c3e79383e61cc3998b5d14e6cdd"
        }
      ],
      "purl": "pkg:npm/server-destroy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/server-destroy/-/server-destroy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/server-destroy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/server-destroy/-/server-destroy-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-throttle",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "add57c8d7cc73a81630d31cd55d3961cfafba9c3"
        }
      ],
      "purl": "pkg:npm/stream-throttle@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-throttle/-/stream-throttle-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-throttle@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-throttle/-/stream-throttle-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "limiter",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "248299d316fa7d96586b775e6740605c2817e87815f0dc7798519e147985596f056f6734f1ed02c84f86de76a5a43d311af1acb2319bd54745afe3e9af16446f"
        }
      ],
      "purl": "pkg:npm/limiter@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/limiter/-/limiter-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/limiter@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/limiter/-/limiter-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "weinre",
      "version": "2.0.0-pre-I0Z7U9OV",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fef8aa223921f7b40bbbbd4c3ed4302f6fd0a813"
        }
      ],
      "purl": "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/weinre/-/weinre-2.0.0-pre-I0Z7U9OV.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/weinre/-/weinre-2.0.0-pre-I0Z7U9OV.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "2.5.11",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ce8ea1f3635e69e49f0ebb497b6a4b0a51ce6f0"
        }
      ],
      "purl": "pkg:npm/express@2.5.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-2.5.11.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@2.5.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-2.5.11.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "testapp/scripts/web-server.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "connect",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42880a22e9438ae59a8add74e437f58ae8e52807"
        }
      ],
      "purl": "pkg:npm/connect@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-1.9.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-1.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "formidable",
      "version": "1.0.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef5491490f9433b705faa77249c99029ae348559"
        }
      ],
      "purl": "pkg:npm/formidable@1.0.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/formidable/-/formidable-1.0.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/formidable@1.0.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/formidable/-/formidable-1.0.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11b5fdaf29c2509255176b80ad520294f5de92b7"
        }
      ],
      "purl": "pkg:npm/mime@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3cac4c861e371a8c9c4770ac23cda8de639b8e5f"
        }
      ],
      "purl": "pkg:npm/qs@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bbf5ab1ba827af23575143490426455f481fe1e"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6465dbf08abcd4db359317f79ac68a646b28ff9"
        }
      ],
      "purl": "pkg:npm/nopt@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6bbaf0877500d36be34ecaa584e0db9fef035209"
        }
      ],
      "purl": "pkg:npm/underscore@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bs-recipes",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d2d4d48a718c8c044769fdc4f89592dc8b69585"
        }
      ],
      "purl": "pkg:npm/bs-recipes@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bs-recipes/-/bs-recipes-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bs-recipes@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bs-recipes/-/bs-recipes-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5fee7b3b96240d38844068b0f22ef061cda7420c1e21e92a91ea48f10df2e30565bab801b764aec314de61460c6481a92d91f7aff4ec32373308c5c4e593aded"
        }
      ],
      "purl": "pkg:npm/fsevents@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c0749bfb7c12e1582fbf065b343b36be9af4da350b4ffb547286186f0fde69814273e97339233826c4e908b49f6d9280a2a65bc09d7235b4d9a6503fde49cc8"
        }
      ],
      "purl": "pkg:npm/nan@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.9.1",
      "scope": "optional",
      "purl": "pkg:npm/node-pre-gyp@0.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.6",
      "scope": "optional",
      "purl": "pkg:npm/rc@1.2.6",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.4.2",
      "scope": "optional",
      "purl": "pkg:npm/deep-extend@0.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b357525a0b4c1f50599cd983e1d9efeea9677198"
        }
      ],
      "purl": "pkg:npm/connect@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-3.5.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e9508abece9b6dba871a6942a1d7911b91911ac7"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "faf51b9eb74aaef3b3acf4ad5f61abf24cb7b93e"
        }
      ],
      "purl": "pkg:npm/statuses@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dev-ip",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a76a3ed1855be7a012bb8ac16cb80f3c00dc28f0"
        }
      ],
      "purl": "pkg:npm/dev-ip@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dev-ip/-/dev-ip-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dev-ip@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dev-ip/-/dev-ip-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "easy-extender",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d3248febe2b159607316d8f9cf491c16648221d"
        }
      ],
      "purl": "pkg:npm/easy-extender@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/easy-extender/-/easy-extender-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/easy-extender@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/easy-extender/-/easy-extender-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eazy-logger",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a325aa5e53d13a2225889b2ac4113b2b9636f4fc"
        }
      ],
      "purl": "pkg:npm/eazy-logger@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eazy-logger/-/eazy-logger-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eazy-logger@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eazy-logger/-/eazy-logger-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tfunk",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "38e4414fc64977d87afdaa72facb6d29f82f7b5b"
        }
      ],
      "purl": "pkg:npm/tfunk@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tfunk/-/tfunk-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tfunk@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tfunk/-/tfunk-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-path",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0fd9a74fc5fad1ae3968b586bda5c632bd6c05a5"
        }
      ],
      "purl": "pkg:npm/object-path@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-path/-/object-path-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-path@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-path/-/object-path-0.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emitter-steward",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3411ade9758a7565df848b2da0cbbd1b46cbd64"
        }
      ],
      "purl": "pkg:npm/emitter-steward@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emitter-steward/-/emitter-steward-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emitter-steward@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emitter-steward/-/emitter-steward-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3794f378c58b342ea7dbbb23095109c4b3b62291"
        }
      ],
      "purl": "pkg:npm/fs-extra@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5ecc6f65f53f662c4415c7675a0331d0992ec66"
        }
      ],
      "purl": "pkg:npm/jsonfile@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa71badd4437af4c148841e3b3b165f9e9e590b7"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "1.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "642fdcaffe52d3448d2bda3b0079e9409064da31"
        }
      ],
      "purl": "pkg:npm/http-proxy@1.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.15.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c86991d816ad1e504750e73874224ecf3bec508"
        }
      ],
      "purl": "pkg:npm/eventemitter3@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "925d2601d39ac485e091cf0da5c6e694dc3dcaff"
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "localtunnel",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcc5922fd85651037d4bde24fd93248d0b24eb05"
        }
      ],
      "purl": "pkg:npm/localtunnel@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/localtunnel/-/localtunnel-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/localtunnel@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/localtunnel/-/localtunnel-1.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e731531ca2ede27d188222427da17821d68ff4fc"
        }
      ],
      "purl": "pkg:npm/debug@2.6.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "openurl",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3875b4b0ef7a52c156f0db41d4609dbb0f94b387"
        }
      ],
      "purl": "pkg:npm/openurl@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/openurl/-/openurl-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/openurl@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/openurl/-/openurl-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.81.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6928946a0e06c5f8d6f8a9333469ffda46298a0"
        }
      ],
      "purl": "pkg:npm/request@2.81.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.81.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83ef5ca860b2b32e4a0deedee8c771b9db57471e"
        }
      ],
      "purl": "pkg:npm/aws4@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "938370a57b4a51dea2c77c15d5c5fdf895164009"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33c183acf193276ecaa98143a69e94bfee1750d1"
        }
      ],
      "purl": "pkg:npm/form-data@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33481d0f1bbff600dd203d75812a6a5fba002e2a"
        }
      ],
      "purl": "pkg:npm/har-validator@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "4.11.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82ffb02b29e662ae53bdc20af15947706739c536"
        }
      ],
      "purl": "pkg:npm/ajv@4.11.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@4.11.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d263135f43307c02c602afc8fe95970c0151369e"
        }
      ],
      "purl": "pkg:npm/har-schema@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4"
        }
      ],
      "purl": "pkg:npm/hawk@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "2.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "39c8918ceff5799f83f9492a848f625add0c766f"
        }
      ],
      "purl": "pkg:npm/boom@2.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@2.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "2.16.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@2.16.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
        }
      ],
      "purl": "pkg:npm/cryptiles@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6541184cc90aeea6c6e7b35e2659082443c66198"
        }
      ],
      "purl": "pkg:npm/sntp@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
        }
      ],
      "purl": "pkg:npm/http-signature@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "512df6da6287144316dc4c18fe1cf1d940739be3"
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dac8787713c9966849fc8180777ebe9c1ddf3b86"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63bc5dcb61331b92bc05fd528953c33462a06f8d"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0fc73a9ed5f0d53c38193398523ef7e543777505"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "33ef30c5c77d4ea21c5a53869d91b56d8f2555e5"
        }
      ],
      "purl": "pkg:npm/performance-now@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "13e26d28ad6b0ffaa91312cd3bf708ed351e7233"
        }
      ],
      "purl": "pkg:npm/qs@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c85adcd4930d383389376dfd487294b6b6781710bdba6140f6334b4c0d4a6752bcf6860cd40650f9e5ae058dd2c63ef7c7c52eae96e196bda544aa005c55afa"
        }
      ],
      "purl": "pkg:npm/uuid@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1aab9660eae79d8b8f675bcaeeab6ee34c2cf69c"
        }
      ],
      "purl": "pkg:npm/yargs@3.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.29.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8e1aa1ee5a53ec5bf151ffa09742a6ad7697876"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7abc22e644dff63b0a96d5ab7f2790c0f01abc95"
        }
      ],
      "purl": "pkg:npm/opn@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/opn/-/opn-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/opn@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/opn/-/opn-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "portscanner",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eabb409e4de24950f5a2a516d35ae769343fbb96"
        }
      ],
      "purl": "pkg:npm/portscanner@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/portscanner/-/portscanner-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/portscanner@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/portscanner/-/portscanner-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number-like",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eab662ddecc2c85727e4bef5cb0cf3d9b4b96f6220975127dde4e5665bca8e9cf59f72192c060c6ca600210805984bb4184360f76ce253f7da10e03f6a2c636c"
        }
      ],
      "purl": "pkg:npm/is-number-like@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number-like/-/is-number-like-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number-like@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number-like/-/is-number-like-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isfinite",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb89b65a9a80281833f0b7478b3a5104f898ebb3"
        }
      ],
      "purl": "pkg:npm/lodash.isfinite@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isfinite/-/lodash.isfinite-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isfinite@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isfinite/-/lodash.isfinite-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce03c5ff0935bc1d9d69a9f14cbd18e568d67625"
        }
      ],
      "purl": "pkg:npm/qs@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resp-modifier",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b124de5c4fbafcba541f48ffa73970f4aa456b4f"
        }
      ],
      "purl": "pkg:npm/resp-modifier@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resp-modifier/-/resp-modifier-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resp-modifier@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resp-modifier/-/resp-modifier-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5f13ff79ef3b740fe30aa803fb09f98805d4782"
        }
      ],
      "purl": "pkg:npm/rx@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c5d96c13fb131101f93c1c5774f8516a1e78d3b"
        }
      ],
      "purl": "pkg:npm/serve-index@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "788c0d2c1de2c81b9e6e8c01843b6b97eb920750"
        }
      ],
      "purl": "pkg:npm/http-errors@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81a552141ec104b88e89ce383103ad5c66564d08"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e546e2726081b81b4bcec8e90808ebcdd323afba"
        }
      ],
      "purl": "pkg:npm/serve-static@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e3d58655346909fe6f0f45a5de68103b294d20"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f91fab4403bcf87e716f70ceb5db2f578bdc17d6"
        }
      ],
      "purl": "pkg:npm/send@0.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.15.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7586a9b3c39741c0282ae33445c4e8ac74734fe0"
        }
      ],
      "purl": "pkg:npm/debug@2.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "708155a5e44e33f5fd0fc53e81d0d40a91be1fff"
        }
      ],
      "purl": "pkg:npm/ms@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f474ca5e6a9246d6fd8e0953cfa9b9c805afa78e"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a002cc85707192a7e7946ceedc11155f60ec736"
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66567e37043eeb4f04d91bd658c0cbefb55b8e04"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59adcd22edc543f7b5381862d31387b1f4bc9473"
        }
      ],
      "purl": "pkg:npm/ms@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e40d932637e6bd923981b25caf7c53e83b6e2e1"
        }
      ],
      "purl": "pkg:npm/socket.io@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40c453e67e6e13c901ddec317af8986cda9eff8c"
        }
      ],
      "purl": "pkg:npm/debug@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3eeb5f264cb75dbbec1baaea26d61f5a4eace2aa"
        }
      ],
      "purl": "pkg:npm/engine.io@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io/-/engine.io-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io/-/engine.io-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3ca7434938648c3e0d9c1e328dd68b622c284ca"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-parser",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9554f1ae33107d6fbd170ca5466d2f833f6a07cf"
        }
      ],
      "purl": "pkg:npm/engine.io-parser@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-parser@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "after",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab5d4fb883f596816d3515f8f791c0af486dd627"
        }
      ],
      "purl": "pkg:npm/after@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/after/-/after-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/after@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/after/-/after-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arraybuffer.slice",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f33b2159f0532a3f3107a272c0ccfbd1ad2979ca"
        }
      ],
      "purl": "pkg:npm/arraybuffer.slice@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arraybuffer.slice@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-arraybuffer",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73926771923b5a19747ad666aa5cd4bf9c6e9ce8"
        }
      ],
      "purl": "pkg:npm/base64-arraybuffer@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-arraybuffer@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "blob",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcf13052ca54463f30f9fc7e95b9a47630a94921"
        }
      ],
      "purl": "pkg:npm/blob@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/blob/-/blob-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blob@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/blob/-/blob-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25326f39cfa4f616ad8787894e3af2cfbc7b6e10"
        }
      ],
      "purl": "pkg:npm/has-binary@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wtf-8",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "392d8ba2d0f1c34d1ee2d630f15d0efb68e1048a"
        }
      ],
      "purl": "pkg:npm/wtf-8@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wtf-8/-/wtf-8-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wtf-8@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wtf-8/-/wtf-8-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "082ddb6c641e85d4bb451f03d52f06eabdb1f018"
        }
      ],
      "purl": "pkg:npm/ws@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ultron",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace116ab557cd197386a4e88f4685378c8b2e4fa"
        }
      ],
      "purl": "pkg:npm/ultron@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ultron/-/ultron-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ultron@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ultron/-/ultron-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68e61eb16210c9545a0a5cce06a873912fe1e68c"
        }
      ],
      "purl": "pkg:npm/has-binary@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a3b3d0e98063d43f4c03f2e8ae6cd51a86883a0"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-adapter",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb6d4bb8bec81e1078b99677f9ced0046066bb8b"
        }
      ],
      "purl": "pkg:npm/socket.io-adapter@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-adapter@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-parser",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd532025103ce429697326befd64005fcfe5b4a0"
        }
      ],
      "purl": "pkg:npm/socket.io-parser@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-parser@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "296594f2753daa63996d2af08d15a95116c9aec3"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        }
      ],
      "purl": "pkg:npm/json3@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-client",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b668f4f771304dfeed179064708386fa6717853"
        }
      ],
      "purl": "pkg:npm/socket.io-client@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-client@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "backo2",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ab1ac8b129363463e35b3ebb69f4dfcfba7947"
        }
      ],
      "purl": "pkg:npm/backo2@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/backo2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-bind",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00c608ab7dcd93897c0009651b1d3a8e1e73bbd1"
        }
      ],
      "purl": "pkg:npm/component-bind@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-bind@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-client",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b730e4127414087596d9be3c88d2bc5fdb6cf5c"
        }
      ],
      "purl": "pkg:npm/engine.io-client@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-client@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-inherit",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "645fc4adf58b72b649d5cae65135619db26ff143"
        }
      ],
      "purl": "pkg:npm/component-inherit@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-inherit@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-cors",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e474793f7ea9843d1bb99c23eef49ff126fff39"
        }
      ],
      "purl": "pkg:npm/has-cors@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-cors/-/has-cors-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-cors@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-cors/-/has-cors-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82dc336d232b9062179d05ab3293a66059fd435d"
        }
      ],
      "purl": "pkg:npm/indexof@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parsejson",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ab7e3759f209ece99437973f7d0f1f64ae0e64ab"
        }
      ],
      "purl": "pkg:npm/parsejson@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parsejson/-/parsejson-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parsejson@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parsejson/-/parsejson-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "better-assert",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40866b9e1b9e0b55b481894311e68faffaebc522"
        }
      ],
      "purl": "pkg:npm/better-assert@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/better-assert@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsite",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "280398e5d664bd74038b6f0905153e6e8af1bc20"
        }
      ],
      "purl": "pkg:npm/callsite@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsite@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseqs",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5208a3738e46766e291ba2ea173684921a8b89d"
        }
      ],
      "purl": "pkg:npm/parseqs@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseqs@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseuri",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80204a50d4dbb779bfdc6ebe2778d90e4bce320a"
        }
      ],
      "purl": "pkg:npm/parseuri@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseuri@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlhttprequest-ssl",
      "version": "1.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "185a888c04eca46c3e4070d99f7b49de3528992d"
        }
      ],
      "purl": "pkg:npm/xmlhttprequest-ssl@1.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlhttprequest-ssl@1.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "yeast",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "008e06d8094320c372dbc2f8ed76a0ca6c8ac419"
        }
      ],
      "purl": "pkg:npm/yeast@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeast/-/yeast-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeast@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeast/-/yeast-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-component",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0c69aa50efc95b866c186f400a33769cb2f1291"
        }
      ],
      "purl": "pkg:npm/object-component@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-component@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-array",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "17e6c11f73dd4f3d74cda7a4ff3238e9ad9bf890"
        }
      ],
      "purl": "pkg:npm/to-array@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-array/-/to-array-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-array@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-array/-/to-array-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ua-parser-js",
      "version": "0.7.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04c81a99bdd5dc52263ea29d24c6bf8d4818a4bb"
        }
      ],
      "purl": "pkg:npm/ua-parser-js@0.7.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ua-parser-js@0.7.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "816e1a866d5598ccf34e5596ddce22d92da490d4"
        }
      ],
      "purl": "pkg:npm/yargs@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-6.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f702e63127e7e231c160a80c1554acb70d5047e5"
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f855a86ce61adc4e8621c3cda21e7a7612c3a8dc"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4d81b5114ae69bf7429b4eabd13ecb1e693c4e2426410f46bbb7e85a48ddf7a623fd7023389740aa7730227f6854aa6ef5e94a2f281d913a689a6c600a557ca"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59f1bf5fdfa801387cd57b65948a3f23c80e898f445d176fd5c41dcb291e5cad7b61c516dc45d4022d93a38a5c1fa9d9b493ebed93a933938cc962599bef11b2"
        }
      ],
      "purl": "pkg:npm/semver@5.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.4.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "gulpfile.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
        }
      ],
      "purl": "pkg:npm/spdx-correct@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9df7a3424594ade6bd11900d596696dc06bac57"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bdf2f20e1f40ed447fbe273266191fced51626c"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b4315bb4214a3d7058ebeee892e13fa24d98b075"
        }
      ],
      "purl": "pkg:npm/window-size@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29cceac0dc4f03c6c87b4a9f217dd18c9f74871c"
        }
      ],
      "purl": "pkg:npm/yargs-parser@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "connect-logger",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d999978a1d20bb4608e7cd434d741652255174b"
        }
      ],
      "purl": "pkg:npm/connect-logger@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-logger/-/connect-logger-0.0.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-logger@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-logger/-/connect-logger-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "typescript",
      "version": "2.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c5b6fd7f6de0914269027f03c0946758f7673a4"
        }
      ],
      "purl": "pkg:npm/typescript@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "testapp/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-2.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "typescript"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "testapp/package-lock.json"
              }
            ],
            "concludedValue": "testapp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "exampleTypescript/package.json"
          },
          {
            "location": "package.json"
          },
          {
            "location": "spec/install/package.json"
          },
          {
            "location": "testapp/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blocking-proxy@1.0.1",
      "dependsOn": [
        "pkg:npm/minimist@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@4.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es6-promisify@5.0.0",
      "dependsOn": [
        "pkg:npm/es6-promise@4.2.4"
      ]
    },
    {
      "ref": "pkg:npm/agent-base@4.2.0",
      "dependsOn": [
        "pkg:npm/es6-promisify@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@3.1.0",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/https-proxy-agent@2.2.1",
      "dependsOn": [
        "pkg:npm/agent-base@4.2.0",
        "pkg:npm/debug@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/browserstack@1.5.1",
      "dependsOn": [
        "pkg:npm/https-proxy-agent@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@2.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.1.3",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.16-tuxcare.4",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.5-tuxcare.3",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.16-tuxcare.4"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.3-tuxcare.1",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.1.5-tuxcare.3",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.8",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.5",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jasmine-core@3.99.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine@3.99.0-tuxcare.1",
      "dependsOn": [
        "pkg:npm/glob@7.2.3",
        "pkg:npm/jasmine-core@3.99.1"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10-tuxcare.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1-tuxcare.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10-tuxcare.2",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/saucelabs@1.5.0",
      "dependsOn": [
        "pkg:npm/https-proxy-agent@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/core-js@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es6-promise@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/immediate@3.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lie@3.1.1",
      "dependsOn": [
        "pkg:npm/immediate@3.0.6"
      ]
    },
    {
      "ref": "pkg:npm/pako@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.0.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/jszip@3.1.5",
      "dependsOn": [
        "pkg:npm/core-js@2.3.0",
        "pkg:npm/es6-promise@3.0.2",
        "pkg:npm/lie@3.1.1",
        "pkg:npm/pako@1.0.7",
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.5.4",
      "dependsOn": [
        "pkg:npm/glob@7.2.3"
      ]
    },
    {
      "ref": "pkg:npm/os-tmpdir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.30",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@9.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.4.19",
      "dependsOn": [
        "pkg:npm/sax@1.2.4",
        "pkg:npm/xmlbuilder@9.0.4"
      ]
    },
    {
      "ref": "pkg:npm/selenium-webdriver@4.0.0-alpha.1",
      "dependsOn": [
        "pkg:npm/jszip@3.1.5",
        "pkg:npm/rimraf@2.5.4",
        "pkg:npm/tmp@0.0.30",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.4.18",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/adm-zip@0.4.16-tuxcare.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loglevel@1.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.3.3-tuxcare.5",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.15.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.5",
      "dependsOn": [
        "pkg:npm/ajv@6.15.0",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.2",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.4.0",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asn1@0.2.6",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.18.0",
      "dependsOn": [
        "pkg:npm/asn1@0.2.6",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.2",
        "pkg:npm/sshpk@1.18.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.5-tuxcare.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.15.0",
      "dependsOn": [
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
      "dependsOn": [
        "pkg:npm/psl@1.15.0",
        "pkg:npm/punycode@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.4.0-tuxcare.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.88.2-tuxcare.7",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.13.2",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3-tuxcare.5",
        "pkg:npm/har-validator@5.1.5",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.5-tuxcare.2",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/tough-cookie@2.5.0-tuxcare.4",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.4.0-tuxcare.3"
      ]
    },
    {
      "ref": "pkg:npm/semver@5.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chownr@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass@2.9.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/yallist@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-minipass@1.2.7",
      "dependsOn": [
        "pkg:npm/minipass@2.9.0"
      ]
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@4.2.3",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cliui@7.0.4",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jackspeak@1.4.2",
      "dependsOn": [
        "pkg:npm/cliui@7.0.4"
      ]
    },
    {
      "ref": "pkg:npm/minizlib@1.3.3",
      "dependsOn": [
        "pkg:npm/minipass@2.9.0"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.6",
      "dependsOn": [
        "pkg:npm/minimist@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/tar@4.4.19-tuxcare.5",
      "dependsOn": [
        "pkg:npm/chownr@1.1.4",
        "pkg:npm/fs-minipass@1.2.7",
        "pkg:npm/jackspeak@1.4.2",
        "pkg:npm/minipass@2.9.0",
        "pkg:npm/minizlib@1.3.3",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/yallist@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/xmlbuilder@11.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.4.23-tuxcare.3",
      "dependsOn": [
        "pkg:npm/sax@1.2.4",
        "pkg:npm/xmlbuilder@11.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@2.1.1",
      "dependsOn": [
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@2.1.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cliui@4.1.0",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/strip-ansi@4.0.0",
        "pkg:npm/wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-try@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.0.0",
      "dependsOn": [
        "pkg:npm/p-try@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@3.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@3.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@3.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@3.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/get-caller-file@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nice-try@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@1.2.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.3.0",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@6.0.5",
      "dependsOn": [
        "pkg:npm/nice-try@1.0.5",
        "pkg:npm/path-key@2.0.1",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@2.0.2",
      "dependsOn": [
        "pkg:npm/path-key@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/p-finally@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-eof@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@0.10.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@6.0.5",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/invert-kv@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@2.0.0",
      "dependsOn": [
        "pkg:npm/invert-kv@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-defer@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-age-cleaner@0.1.3",
      "dependsOn": [
        "pkg:npm/p-defer@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-is-promise@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mem@4.0.0",
      "dependsOn": [
        "pkg:npm/map-age-cleaner@0.1.3",
        "pkg:npm/mimic-fn@1.2.0",
        "pkg:npm/p-is-promise@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@3.0.1",
      "dependsOn": [
        "pkg:npm/execa@0.10.0",
        "pkg:npm/lcid@2.0.0",
        "pkg:npm/mem@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-main-filename@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-blocking@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which-module@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@11.1.1-tuxcare.3",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@12.0.5-tuxcare.1",
      "dependsOn": [
        "pkg:npm/cliui@4.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/find-up@3.0.0",
        "pkg:npm/get-caller-file@1.0.3",
        "pkg:npm/os-locale@3.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/which-module@2.0.0",
        "pkg:npm/y18n@4.0.0",
        "pkg:npm/yargs-parser@11.1.1-tuxcare.3"
      ]
    },
    {
      "ref": "pkg:npm/webdriver-manager@13.0.0-tuxcare.1",
      "dependsOn": [
        "pkg:npm/adm-zip@0.4.16-tuxcare.3",
        "pkg:npm/loglevel@1.9.2",
        "pkg:npm/request@2.88.2-tuxcare.7",
        "pkg:npm/semver@5.7.2",
        "pkg:npm/tar@4.4.19-tuxcare.5",
        "pkg:npm/xml2js@0.4.23-tuxcare.3",
        "pkg:npm/yargs@12.0.5-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/chalk@0.4.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/events@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimatch@2.0.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@6.0.96",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/glob@5.0.35",
      "dependsOn": [
        "pkg:npm/@types/events@1.1.0",
        "pkg:npm/@types/minimatch@2.0.29",
        "pkg:npm/@types/node@6.0.96"
      ]
    },
    {
      "ref": "pkg:npm/@types/jasmine@3.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/loglevel@1.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/optimist@0.0.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/yargs@12.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.3",
      "dependsOn": [
        "pkg:npm/depd@1.1.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.1.0",
        "pkg:npm/statuses@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.23",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.3.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.3.3",
      "dependsOn": [
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/http-errors@1.6.3",
        "pkg:npm/iconv-lite@0.4.23",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.38.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.22",
      "dependsOn": [
        "pkg:npm/mime-db@1.38.0"
      ]
    },
    {
      "ref": "pkg:npm/type-is@1.6.16",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.22"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.18.3",
      "dependsOn": [
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/http-errors@1.6.3",
        "pkg:npm/iconv-lite@0.4.23",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/raw-body@2.3.3",
        "pkg:npm/type-is@1.6.16"
      ]
    },
    {
      "ref": "pkg:npm/assertion-error@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-detect@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-eql@0.1.3",
      "dependsOn": [
        "pkg:npm/type-detect@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/type-detect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@3.5.0",
      "dependsOn": [
        "pkg:npm/assertion-error@1.0.2",
        "pkg:npm/deep-eql@0.1.3",
        "pkg:npm/type-detect@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chai-as-promised@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-parse@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.5.0",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/clang-format@1.0.49",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/expect.js@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/negotiator@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.5",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.22",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.1.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/statuses@1.4.0",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.4",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.2",
        "pkg:npm/ipaddr.js@1.8.0"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.16.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@1.6.3",
        "pkg:npm/mime@1.4.1",
        "pkg:npm/ms@2.0.0",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/statuses@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.13.2",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.16.2"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.16.4",
      "dependsOn": [
        "pkg:npm/accepts@1.3.5",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/body-parser@1.18.3",
        "pkg:npm/content-disposition@0.5.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@1.1.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@2.0.4",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/send@0.16.2",
        "pkg:npm/serve-static@1.13.2",
        "pkg:npm/setprototypeof@1.1.0",
        "pkg:npm/statuses@1.4.0",
        "pkg:npm/type-is@1.6.16",
        "pkg:npm/utils-merge@1.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/arr-diff@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-unique@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-flatten@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend-shallow@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/is-number@3.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@2.1.1",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@4.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1",
        "pkg:npm/to-regex-range@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-visit@1.0.1",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/map-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/collection-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/map-visit@1.0.0",
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/component-emitter@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-value@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@4.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/has-values@1.0.0",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@1.0.0",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-plain-object@2.0.4",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assign-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@1.0.1",
      "dependsOn": [
        "pkg:npm/is-plain-object@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/extend-shallow@3.0.2",
      "dependsOn": [
        "pkg:npm/assign-symbols@1.0.0",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/split-string@3.1.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/set-value@2.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/split-string@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-object-path@0.3.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/arr-union@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-value@0.4.3",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/to-object-path@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/union-value@1.0.0",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/set-value@0.4.3"
      ]
    },
    {
      "ref": "pkg:npm/has-values@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": [
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@0.3.1",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@0.1.4",
        "pkg:npm/isobject@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unset-value@1.0.0",
      "dependsOn": [
        "pkg:npm/has-value@0.3.1",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cache-base@1.0.1",
      "dependsOn": [
        "pkg:npm/collection-visit@1.0.0",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-value@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/set-value@2.0.0",
        "pkg:npm/to-object-path@0.3.0",
        "pkg:npm/union-value@1.0.0",
        "pkg:npm/unset-value@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@0.1.6",
        "pkg:npm/is-data-descriptor@0.1.4",
        "pkg:npm/kind-of@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/define-property@0.2.5",
      "dependsOn": [
        "pkg:npm/is-descriptor@0.1.6"
      ]
    },
    {
      "ref": "pkg:npm/copy-descriptor@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-copy@0.1.0",
      "dependsOn": [
        "pkg:npm/copy-descriptor@0.1.1",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/static-extend@0.1.2",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/object-copy@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/class-utils@0.3.6",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/static-extend@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@6.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-descriptor@1.0.2",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@1.0.0",
        "pkg:npm/is-data-descriptor@1.0.0",
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/define-property@1.0.0",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/for-in@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mixin-deep@1.3.1",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pascalcase@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base@0.11.2",
      "dependsOn": [
        "pkg:npm/cache-base@1.0.1",
        "pkg:npm/class-utils@0.3.6",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/mixin-deep@1.3.0",
        "pkg:npm/mixin-deep@1.3.1",
        "pkg:npm/pascalcase@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/map-cache@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/atob@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decode-uri-component@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-url@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-url@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urix@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-resolve@0.5.2",
      "dependsOn": [
        "pkg:npm/atob@2.1.2",
        "pkg:npm/decode-uri-component@0.2.0",
        "pkg:npm/resolve-url@0.2.1",
        "pkg:npm/source-map-url@0.4.0",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/use@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/snapdragon@0.8.2",
      "dependsOn": [
        "pkg:npm/base@0.11.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/source-map-resolve@0.5.2",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/use@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-util@3.0.1",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-node@2.1.1",
      "dependsOn": [
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/snapdragon-util@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/define-property@2.0.2",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ret@0.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-regex@1.1.0",
      "dependsOn": [
        "pkg:npm/ret@0.1.15"
      ]
    },
    {
      "ref": "pkg:npm/regex-not@1.0.2",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-regex@3.0.2",
      "dependsOn": [
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/braces@2.3.2",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fill-range@4.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/repeat-element@1.1.3",
        "pkg:npm/snapdragon-node@2.1.1",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/split-string@3.1.0",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/posix-character-classes@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@2.1.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/posix-character-classes@0.1.1",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.1",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fragment-cache@0.2.1",
      "dependsOn": [
        "pkg:npm/map-cache@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/extglob@2.0.4",
      "dependsOn": [
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/expand-brackets@2.1.4",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.1",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.pick@1.3.0",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nanomatch@1.2.13",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/is-windows@1.0.2",
        "pkg:npm/kind-of@6.0.2",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@3.1.10",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/braces@2.3.2",
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/extglob@2.0.4",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/kind-of@6.0.2",
        "pkg:npm/nanomatch@1.2.13",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@2.1.1",
      "dependsOn": [
        "pkg:npm/remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@2.0.0",
      "dependsOn": [
        "pkg:npm/micromatch@3.1.10",
        "pkg:npm/normalize-path@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.1",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/stream-exhaust@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async-done@1.3.1",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.1",
        "pkg:npm/once@1.4.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/stream-exhaust@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/async-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@3.1.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/path-dirname@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@3.1.0",
      "dependsOn": [
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/path-dirname@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@1.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@1.0.1",
      "dependsOn": [
        "pkg:npm/binary-extensions@1.11.0",
        "pkg:npm/binary-extensions@1.12.0"
      ]
    },
    {
      "ref": "pkg:npm/is-glob@4.0.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.debounce@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdirp@2.2.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/micromatch@3.1.10",
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/upath@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.12.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.21",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/needle@2.2.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/iconv-lite@0.4.21",
        "pkg:npm/sax@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-homedir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/osenv@0.1.5",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/nopt@4.0.1",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.1",
        "pkg:npm/osenv@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11",
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/ignore-walk@3.0.1",
      "dependsOn": [
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/npm-bundled@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-packlist@1.1.10",
      "dependsOn": [
        "pkg:npm/ignore-walk@3.0.1",
        "pkg:npm/npm-bundled@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/delegates@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/are-we-there-yet@1.1.4",
      "dependsOn": [
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/readable-stream@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/console-control-strings@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aproba@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-unicode@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wide-align@1.1.2",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/gauge@2.7.4",
      "dependsOn": [
        "pkg:npm/aproba@1.2.0",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wide-align@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/npmlog@4.1.2",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@1.1.4",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@2.7.4",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.7",
      "dependsOn": [
        "pkg:npm/deep-extend@0.5.1",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.1.2",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.2",
      "dependsOn": [
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/chownr@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass@2.2.4",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/yallist@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fs-minipass@1.2.5",
      "dependsOn": [
        "pkg:npm/minipass@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/minizlib@1.1.0",
      "dependsOn": [
        "pkg:npm/minipass@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/tar@4.4.1",
      "dependsOn": [
        "pkg:npm/chownr@1.0.1",
        "pkg:npm/fs-minipass@1.2.5",
        "pkg:npm/minipass@2.2.4",
        "pkg:npm/minizlib@1.1.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/yallist@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.10.0",
      "dependsOn": [
        "pkg:npm/detect-libc@1.0.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/needle@2.2.0",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npm-packlist@1.1.10",
        "pkg:npm/npmlog@4.1.2",
        "pkg:npm/rc@1.2.7",
        "pkg:npm/rimraf@2.6.2",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/tar@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.2.4",
      "dependsOn": [
        "pkg:npm/nan@2.12.1",
        "pkg:npm/node-pre-gyp@0.10.0"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@2.0.4",
      "dependsOn": [
        "pkg:npm/anymatch@2.0.0",
        "pkg:npm/async-each@1.0.1",
        "pkg:npm/braces@2.3.2",
        "pkg:npm/fsevents@1.2.4",
        "pkg:npm/glob-parent@3.1.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-glob@4.0.0",
        "pkg:npm/lodash.debounce@4.0.8",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/readdirp@2.2.1",
        "pkg:npm/upath@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-negated-glob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/just-debounce@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-slice@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@1.0.0",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.defaults@1.1.0",
      "dependsOn": [
        "pkg:npm/array-each@1.0.1",
        "pkg:npm/array-slice@1.1.0",
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-watcher@5.0.3",
      "dependsOn": [
        "pkg:npm/anymatch@2.0.0",
        "pkg:npm/async-done@1.3.1",
        "pkg:npm/chokidar@2.0.4",
        "pkg:npm/is-negated-glob@1.0.0",
        "pkg:npm/just-debounce@1.0.0",
        "pkg:npm/object.defaults@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-wrap@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-colors@1.1.0",
      "dependsOn": [
        "pkg:npm/ansi-wrap@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/archy@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/default-compare@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array-sort@1.0.0",
      "dependsOn": [
        "pkg:npm/default-compare@1.0.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/kind-of@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/color-support@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/each-props@1.3.2",
      "dependsOn": [
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.defaults@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/copy-props@2.0.4",
      "dependsOn": [
        "pkg:npm/each-props@1.3.2",
        "pkg:npm/is-plain-object@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-gray@0.1.1",
      "dependsOn": [
        "pkg:npm/ansi-wrap@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/parse-node-version@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/time-stamp@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fancy-log@1.3.3",
      "dependsOn": [
        "pkg:npm/ansi-gray@0.1.1",
        "pkg:npm/color-support@1.1.3",
        "pkg:npm/parse-node-version@1.0.0",
        "pkg:npm/time-stamp@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/sparkles@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glogg@1.0.0",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gulplog@1.0.0",
      "dependsOn": [
        "pkg:npm/glogg@1.0.0",
        "pkg:npm/glogg@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/interpret@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-file@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-passwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/homedir-polyfill@1.0.1",
      "dependsOn": [
        "pkg:npm/parse-passwd@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/expand-tilde@2.0.2",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/global-prefix@1.0.2",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/homedir-polyfill@1.0.1",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/is-windows@1.0.2",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/global-modules@1.0.0",
      "dependsOn": [
        "pkg:npm/global-prefix@1.0.2",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/is-windows@1.0.2",
        "pkg:npm/resolve-dir@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve-dir@1.0.1",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/global-modules@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@2.0.0",
      "dependsOn": [
        "pkg:npm/detect-file@1.0.0",
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/micromatch@3.1.10",
        "pkg:npm/micromatch@3.1.5",
        "pkg:npm/resolve-dir@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/unc-path-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unc-path@1.0.0",
      "dependsOn": [
        "pkg:npm/unc-path-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-relative@1.0.0",
      "dependsOn": [
        "pkg:npm/is-unc-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute@1.0.0",
      "dependsOn": [
        "pkg:npm/is-relative@1.0.0",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/is-windows@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/path-root-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-root@0.1.1",
      "dependsOn": [
        "pkg:npm/path-root-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-filepath@1.0.2",
      "dependsOn": [
        "pkg:npm/is-absolute@1.0.0",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/path-root@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/fined@1.1.1",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.defaults@1.1.0",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/parse-filepath@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/flagged-respawn@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-iterator@1.0.1",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.map@1.0.1",
      "dependsOn": [
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/make-iterator@1.0.0",
        "pkg:npm/make-iterator@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rechoir@0.6.2",
      "dependsOn": [
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/liftoff@2.5.0",
      "dependsOn": [
        "pkg:npm/extend@3.0.1",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/findup-sync@2.0.0",
        "pkg:npm/fined@1.1.0",
        "pkg:npm/fined@1.1.1",
        "pkg:npm/flagged-respawn@1.0.0",
        "pkg:npm/flagged-respawn@1.0.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.map@1.0.1",
        "pkg:npm/rechoir@0.6.2",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/stack-trace@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/matchdep@2.0.0",
      "dependsOn": [
        "pkg:npm/findup-sync@2.0.0",
        "pkg:npm/micromatch@3.1.10",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/stack-trace@0.0.10"
      ]
    },
    {
      "ref": "pkg:npm/mute-stdout@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-hrtime@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/replace-homedir@1.0.0",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1",
        "pkg:npm/is-absolute@1.0.0",
        "pkg:npm/remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@3.1.1",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.38",
      "dependsOn": [
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/d@1.0.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/es6-iterator@2.0.3",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sver-compat@1.5.0",
      "dependsOn": [
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/semver-greatest-satisfied-range@1.1.0",
      "dependsOn": [
        "pkg:npm/sver-compat@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/v8flags@3.1.1",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@3.2.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/invert-kv@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@1.0.0",
      "dependsOn": [
        "pkg:npm/invert-kv@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@1.4.0",
      "dependsOn": [
        "pkg:npm/lcid@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.1",
        "pkg:npm/error-ex@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-builtin-module@1.0.0",
      "dependsOn": [
        "pkg:npm/builtin-modules@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.2.0",
        "pkg:npm/spdx-license-ids@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/spdx-correct@3.1.0",
      "dependsOn": [
        "pkg:npm/spdx-expression-parse@3.0.0",
        "pkg:npm/spdx-license-ids@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "dependsOn": [
        "pkg:npm/spdx-correct@3.1.0",
        "pkg:npm/spdx-expression-parse@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.4.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.5.0",
        "pkg:npm/hosted-git-info@2.7.1",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/semver@5.4.1",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/validate-npm-package-license@3.0.1",
        "pkg:npm/validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/which-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@5.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@7.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.3",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-cli@2.0.1",
      "dependsOn": [
        "pkg:npm/ansi-colors@1.1.0",
        "pkg:npm/archy@1.0.0",
        "pkg:npm/array-sort@1.0.0",
        "pkg:npm/color-support@1.1.3",
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/copy-props@2.0.4",
        "pkg:npm/fancy-log@1.3.3",
        "pkg:npm/gulplog@1.0.0",
        "pkg:npm/interpret@1.1.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/liftoff@2.5.0",
        "pkg:npm/matchdep@2.0.0",
        "pkg:npm/mute-stdout@1.0.1",
        "pkg:npm/pretty-hrtime@1.0.3",
        "pkg:npm/replace-homedir@1.0.0",
        "pkg:npm/semver-greatest-satisfied-range@1.1.0",
        "pkg:npm/v8flags@3.1.1",
        "pkg:npm/yargs@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/arr-map@2.0.2",
      "dependsOn": [
        "pkg:npm/make-iterator@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/arr-filter@1.1.2",
      "dependsOn": [
        "pkg:npm/make-iterator@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-number@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-initial@1.1.0",
      "dependsOn": [
        "pkg:npm/array-slice@1.1.0",
        "pkg:npm/is-number@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/array-last@1.3.0",
      "dependsOn": [
        "pkg:npm/is-number@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/async-settle@1.0.0",
      "dependsOn": [
        "pkg:npm/async-done@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/now-and-later@2.0.0",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/bach@1.2.0",
      "dependsOn": [
        "pkg:npm/arr-filter@1.1.2",
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/arr-map@2.0.2",
        "pkg:npm/array-each@1.0.1",
        "pkg:npm/array-initial@1.1.0",
        "pkg:npm/array-last@1.3.0",
        "pkg:npm/async-done@1.3.1",
        "pkg:npm/async-settle@1.0.0",
        "pkg:npm/now-and-later@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/collection-map@1.0.0",
      "dependsOn": [
        "pkg:npm/arr-map@2.0.2",
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/make-iterator@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es6-weak-map@2.0.2",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/default-resolution@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/last-run@1.1.1",
      "dependsOn": [
        "pkg:npm/default-resolution@2.0.0",
        "pkg:npm/es6-weak-map@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.reduce@1.0.1",
      "dependsOn": [
        "pkg:npm/for-own@1.0.0",
        "pkg:npm/make-iterator@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/undertaker-registry@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undertaker@1.2.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/arr-map@2.0.2",
        "pkg:npm/bach@1.2.0",
        "pkg:npm/collection-map@1.0.0",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/last-run@1.1.1",
        "pkg:npm/object.defaults@1.1.0",
        "pkg:npm/object.reduce@1.0.1",
        "pkg:npm/undertaker-registry@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string_decoder@1.0.3",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.3",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.0.3",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xtend@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@2.0.3",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-mkdirp-stream@1.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ordered-read-streams@1.0.1",
      "dependsOn": [
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/stream-shift@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexify@3.6.1",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.0.6",
        "pkg:npm/stream-shift@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@2.0.1",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.1",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pumpify@1.5.1",
      "dependsOn": [
        "pkg:npm/duplexify@3.6.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/pump@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/to-absolute-glob@2.0.2",
      "dependsOn": [
        "pkg:npm/is-absolute@1.0.0",
        "pkg:npm/is-negated-glob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsonify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify@1.0.1",
      "dependsOn": [
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/through2-filter@2.0.0",
      "dependsOn": [
        "pkg:npm/through2@2.0.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/unique-stream@2.2.1",
      "dependsOn": [
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/through2-filter@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-stream@6.1.0",
      "dependsOn": [
        "pkg:npm/extend@3.0.2",
        "pkg:npm/glob-parent@3.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/is-negated-glob@1.0.0",
        "pkg:npm/ordered-read-streams@1.0.1",
        "pkg:npm/pumpify@1.5.1",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/remove-trailing-separator@1.1.0",
        "pkg:npm/to-absolute-glob@2.0.2",
        "pkg:npm/unique-stream@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/is-valid-glob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lazystream@1.0.0",
      "dependsOn": [
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/flush-write-stream@1.0.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/lead@1.0.0",
      "dependsOn": [
        "pkg:npm/flush-write-stream@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/object-keys@1.0.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.3",
      "dependsOn": [
        "pkg:npm/object-keys@1.0.12"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.assign@4.1.0",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.0",
        "pkg:npm/object-keys@1.0.12"
      ]
    },
    {
      "ref": "pkg:npm/remove-bom-buffer@3.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6",
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/remove-bom-stream@1.2.0",
      "dependsOn": [
        "pkg:npm/remove-bom-buffer@3.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/value-or-function@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-options@1.1.0",
      "dependsOn": [
        "pkg:npm/value-or-function@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/to-through@2.0.0",
      "dependsOn": [
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/clone@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-buffer@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cloneable-readable@1.1.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/readable-stream@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/replace-ext@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@2.2.0",
      "dependsOn": [
        "pkg:npm/clone-buffer@1.0.0",
        "pkg:npm/clone-stats@1.0.0",
        "pkg:npm/clone@2.1.2",
        "pkg:npm/cloneable-readable@1.1.2",
        "pkg:npm/remove-trailing-separator@1.1.0",
        "pkg:npm/replace-ext@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/buffer-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/append-buffer@1.0.2",
      "dependsOn": [
        "pkg:npm/buffer-equal@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@1.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemap@1.1.0",
      "dependsOn": [
        "pkg:npm/append-buffer@1.0.2",
        "pkg:npm/convert-source-map@1.6.0",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/now-and-later@2.0.0",
        "pkg:npm/remove-bom-buffer@3.0.0",
        "pkg:npm/vinyl@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-fs@3.0.3",
      "dependsOn": [
        "pkg:npm/fs-mkdirp-stream@1.0.0",
        "pkg:npm/glob-stream@6.1.0",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/is-valid-glob@1.0.0",
        "pkg:npm/lazystream@1.0.0",
        "pkg:npm/lead@1.0.0",
        "pkg:npm/object.assign@4.1.0",
        "pkg:npm/pumpify@1.5.1",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/remove-bom-buffer@3.0.0",
        "pkg:npm/remove-bom-stream@1.2.0",
        "pkg:npm/resolve-options@1.1.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/to-through@2.0.0",
        "pkg:npm/value-or-function@3.0.0",
        "pkg:npm/vinyl-sourcemap@1.1.0",
        "pkg:npm/vinyl@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp@4.0.0",
      "dependsOn": [
        "pkg:npm/glob-watcher@5.0.3",
        "pkg:npm/gulp-cli@2.0.1",
        "pkg:npm/undertaker@1.2.0",
        "pkg:npm/vinyl-fs@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/next-tick@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.46",
      "dependsOn": [
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1",
        "pkg:npm/next-tick@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter@0.3.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/is-promise@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-queue@0.1.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.38"
      ]
    },
    {
      "ref": "pkg:npm/timers-ext@0.1.7",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.46",
        "pkg:npm/next-tick@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/memoizee@0.4.14",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.46",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/event-emitter@0.3.5",
        "pkg:npm/is-promise@2.1.0",
        "pkg:npm/lru-queue@0.1.0",
        "pkg:npm/next-tick@1.0.0",
        "pkg:npm/timers-ext@0.1.7"
      ]
    },
    {
      "ref": "pkg:npm/cli-color@1.4.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.46",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/memoizee@0.4.14",
        "pkg:npm/timers-ext@0.1.7"
      ]
    },
    {
      "ref": "pkg:npm/diff@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/from@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pause-stream@0.0.11",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/split@1.0.1",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner@0.2.2",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/event-stream@3.3.5",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.0.7",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@1.0.1",
        "pkg:npm/stream-combiner@0.2.2",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/array-differ@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/beeper@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dateformat@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-gulplog@0.1.0",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash._reescape@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basecopy@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basetostring@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basevalues@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._root@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.escape@3.2.0",
      "dependsOn": [
        "pkg:npm/lodash._root@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._getnative@3.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarguments@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarray@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.keys@3.1.2",
      "dependsOn": [
        "pkg:npm/lodash._getnative@3.9.1",
        "pkg:npm/lodash.isarguments@3.1.0",
        "pkg:npm/lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash.restparam@3.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@3.1.1",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.template@3.6.2",
      "dependsOn": [
        "pkg:npm/lodash._basecopy@3.0.1",
        "pkg:npm/lodash._basetostring@3.0.1",
        "pkg:npm/lodash._basevalues@3.0.0",
        "pkg:npm/lodash._isiterateecall@3.0.9",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.2.0",
        "pkg:npm/lodash.keys@3.1.2",
        "pkg:npm/lodash.restparam@3.6.1",
        "pkg:npm/lodash.templatesettings@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.14",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/duplexer2@0.0.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/multipipe@0.1.2",
      "dependsOn": [
        "pkg:npm/duplexer2@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/replace-ext@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.5.3",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@1.0.3",
        "pkg:npm/clone@1.0.4",
        "pkg:npm/replace-ext@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-util@3.0.8",
      "dependsOn": [
        "pkg:npm/array-differ@1.0.0",
        "pkg:npm/array-uniq@1.0.3",
        "pkg:npm/beeper@1.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/dateformat@2.2.0",
        "pkg:npm/fancy-log@1.3.2",
        "pkg:npm/fancy-log@1.3.3",
        "pkg:npm/gulplog@1.0.0",
        "pkg:npm/has-gulplog@0.1.0",
        "pkg:npm/lodash._reescape@3.0.0",
        "pkg:npm/lodash._reevaluate@3.0.0",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.template@3.6.2",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/multipipe@0.1.2",
        "pkg:npm/object-assign@3.0.0",
        "pkg:npm/replace-ext@0.0.1",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/gulp-diff@1.0.0",
      "dependsOn": [
        "pkg:npm/cli-color@1.4.0",
        "pkg:npm/diff@2.2.3",
        "pkg:npm/event-stream@3.3.5",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/pkginfo@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer2@0.1.4",
      "dependsOn": [
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner2@1.1.1",
      "dependsOn": [
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/readable-stream@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/stream-equal@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.34",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/through2@0.6.5",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-clang-format@1.0.23",
      "dependsOn": [
        "pkg:npm/clang-format@1.0.49",
        "pkg:npm/gulp-diff@1.0.0",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/pkginfo@0.3.1",
        "pkg:npm/stream-combiner2@1.1.1",
        "pkg:npm/stream-equal@0.1.6",
        "pkg:npm/through2@0.6.5"
      ]
    },
    {
      "ref": "pkg:npm/@types/fancy-log@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.3.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/fancy-log@1.3.2",
      "dependsOn": [
        "pkg:npm/ansi-gray@0.1.1",
        "pkg:npm/color-support@1.1.3",
        "pkg:npm/time-stamp@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/plugin-error@1.0.1",
      "dependsOn": [
        "pkg:npm/ansi-colors@1.1.0",
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/extend-shallow@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/gulp-tslint@8.1.3",
      "dependsOn": [
        "pkg:npm/@types/fancy-log@1.3.0",
        "pkg:npm/chalk@2.3.1",
        "pkg:npm/fancy-log@1.3.2",
        "pkg:npm/map-stream@0.0.7",
        "pkg:npm/plugin-error@1.0.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/marked@0.3.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-colors@3.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@3.2.6",
      "dependsOn": [
        "pkg:npm/ms@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/diff@3.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/he@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.12.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/log-symbols@2.2.0",
      "dependsOn": [
        "pkg:npm/chalk@2.4.2"
      ]
    },
    {
      "ref": "pkg:npm/is-callable@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.2",
      "dependsOn": [
        "pkg:npm/has-symbols@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.2.0",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-symbol@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-regex@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.13.0",
      "dependsOn": [
        "pkg:npm/es-to-primitive@1.2.0",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has@1.0.3",
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-regex@1.0.4",
        "pkg:npm/object-keys@1.0.12"
      ]
    },
    {
      "ref": "pkg:npm/object.getownpropertydescriptors@2.0.3",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.13.0"
      ]
    },
    {
      "ref": "pkg:npm/node-environment-flags@1.0.4",
      "dependsOn": [
        "pkg:npm/object.getownpropertydescriptors@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@6.0.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which@1.3.1",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/wide-align@1.1.3",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@11.1.1",
      "dependsOn": [
        "pkg:npm/camelcase@5.0.0",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@12.0.5",
      "dependsOn": [
        "pkg:npm/cliui@4.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/find-up@3.0.0",
        "pkg:npm/get-caller-file@1.0.3",
        "pkg:npm/os-locale@3.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/which-module@2.0.0",
        "pkg:npm/y18n@4.0.0",
        "pkg:npm/yargs-parser@11.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-buffer@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flat@4.1.0",
      "dependsOn": [
        "pkg:npm/is-buffer@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/yargs-unparser@1.5.0",
      "dependsOn": [
        "pkg:npm/flat@4.1.0",
        "pkg:npm/lodash@4.17.11",
        "pkg:npm/yargs@12.0.5"
      ]
    },
    {
      "ref": "pkg:npm/mocha@6.0.2",
      "dependsOn": [
        "pkg:npm/ansi-colors@3.2.3",
        "pkg:npm/browser-stdout@1.3.1",
        "pkg:npm/debug@3.2.6",
        "pkg:npm/diff@3.5.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/findup-sync@2.0.0",
        "pkg:npm/glob@7.1.3",
        "pkg:npm/growl@1.10.5",
        "pkg:npm/he@1.2.0",
        "pkg:npm/js-yaml@3.12.0",
        "pkg:npm/log-symbols@2.2.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/ms@2.1.1",
        "pkg:npm/node-environment-flags@1.0.4",
        "pkg:npm/object.assign@4.1.0",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/supports-color@6.0.0",
        "pkg:npm/which@1.3.1",
        "pkg:npm/wide-align@1.1.3",
        "pkg:npm/yargs-parser@11.1.1",
        "pkg:npm/yargs-unparser@1.5.0",
        "pkg:npm/yargs@12.0.5"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-code-frame@6.26.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/js-tokens@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.19.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.13.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsutils@2.29.0",
      "dependsOn": [
        "pkg:npm/tslib@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/tslint@5.11.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/chalk@2.4.1",
        "pkg:npm/commander@2.19.0",
        "pkg:npm/diff@3.5.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/js-yaml@3.13.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/tslib@1.9.3",
        "pkg:npm/tsutils@2.29.0"
      ]
    },
    {
      "ref": "pkg:npm/esutils@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@0.7.2",
      "dependsOn": [
        "pkg:npm/esutils@1.1.6",
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsutils@3.5.2",
      "dependsOn": [
        "pkg:npm/tslib@1.9.0"
      ]
    },
    {
      "ref": "pkg:npm/tslint-eslint-rules@5.4.0",
      "dependsOn": [
        "pkg:npm/doctrine@0.7.2",
        "pkg:npm/tslib@1.9.0",
        "pkg:npm/tsutils@3.5.2"
      ]
    },
    {
      "ref": "pkg:npm/typescript@3.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@5.0.15",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@0.3.0",
      "dependsOn": [
        "pkg:npm/glob@5.0.15"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/tsutils@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-align@2.0.0",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cli-boxes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pseudomap@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@4.1.5",
      "dependsOn": [
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/yallist@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@5.1.0",
      "dependsOn": [
        "pkg:npm/lru-cache@4.1.5",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/execa@0.7.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/term-size@1.2.0",
      "dependsOn": [
        "pkg:npm/execa@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/widest-line@2.0.1",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/boxen@1.3.0",
      "dependsOn": [
        "pkg:npm/ansi-align@2.0.0",
        "pkg:npm/camelcase@4.1.0",
        "pkg:npm/chalk@2.4.1",
        "pkg:npm/cli-boxes@1.0.0",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/term-size@1.2.0",
        "pkg:npm/widest-line@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-prop@4.2.0",
      "dependsOn": [
        "pkg:npm/is-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@1.3.0",
      "dependsOn": [
        "pkg:npm/pify@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/crypto-random-string@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-string@1.0.0",
      "dependsOn": [
        "pkg:npm/crypto-random-string@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/write-file-atomic@2.3.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xdg-basedir@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/configstore@3.1.2",
      "dependsOn": [
        "pkg:npm/dot-prop@4.2.0",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/make-dir@1.3.0",
        "pkg:npm/unique-string@1.0.0",
        "pkg:npm/write-file-atomic@2.3.0",
        "pkg:npm/xdg-basedir@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/import-lazy@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ci-info@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-ci@1.2.1",
      "dependsOn": [
        "pkg:npm/ci-info@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/global-dirs@0.1.1",
      "dependsOn": [
        "pkg:npm/ini@1.3.5"
      ]
    },
    {
      "ref": "pkg:npm/path-is-inside@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@1.0.1",
      "dependsOn": [
        "pkg:npm/path-is-inside@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-installed-globally@0.1.0",
      "dependsOn": [
        "pkg:npm/global-dirs@0.1.1",
        "pkg:npm/is-path-inside@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-npm@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/capture-stack-trace@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/create-error-class@3.0.2",
      "dependsOn": [
        "pkg:npm/capture-stack-trace@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/duplexer3@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-redirect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-retry-allowed@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lowercase-keys@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timed-out@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unzip-response@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prepend-http@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse-lax@1.0.0",
      "dependsOn": [
        "pkg:npm/prepend-http@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/got@6.7.1",
      "dependsOn": [
        "pkg:npm/create-error-class@3.0.2",
        "pkg:npm/duplexer3@0.1.4",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-redirect@1.0.0",
        "pkg:npm/is-retry-allowed@1.1.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/lowercase-keys@1.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/timed-out@4.0.1",
        "pkg:npm/unzip-response@2.0.1",
        "pkg:npm/url-parse-lax@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.8",
      "dependsOn": [
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-auth-token@3.3.2",
      "dependsOn": [
        "pkg:npm/rc@1.2.8",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@3.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/package-json@4.0.1",
      "dependsOn": [
        "pkg:npm/got@6.7.1",
        "pkg:npm/registry-auth-token@3.3.2",
        "pkg:npm/registry-url@3.1.0",
        "pkg:npm/semver@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@3.1.0",
      "dependsOn": [
        "pkg:npm/package-json@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/semver-diff@2.1.0",
      "dependsOn": [
        "pkg:npm/semver@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/update-notifier@2.5.0",
      "dependsOn": [
        "pkg:npm/boxen@1.3.0",
        "pkg:npm/chalk@2.4.1",
        "pkg:npm/configstore@3.1.2",
        "pkg:npm/import-lazy@2.1.0",
        "pkg:npm/is-ci@1.2.1",
        "pkg:npm/is-installed-globally@0.1.0",
        "pkg:npm/is-npm@1.0.0",
        "pkg:npm/latest-version@3.1.0",
        "pkg:npm/semver-diff@2.1.0",
        "pkg:npm/xdg-basedir@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tslint@4.5.1",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/colors@1.3.3",
        "pkg:npm/diff@3.5.0",
        "pkg:npm/findup-sync@0.3.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/tsutils@1.9.1",
        "pkg:npm/update-notifier@2.5.0"
      ]
    },
    {
      "ref": "pkg:npm/vrsource-tslint-rules@4.0.1",
      "dependsOn": [
        "pkg:npm/tslint@4.5.1"
      ]
    },
    {
      "ref": "pkg:npm/protractor@6.0.0-tuxcare.2",
      "dependsOn": [
        "pkg:npm/@types/chalk@0.4.31",
        "pkg:npm/@types/glob@5.0.35",
        "pkg:npm/@types/jasmine@3.3.4",
        "pkg:npm/@types/loglevel@1.5.3",
        "pkg:npm/@types/minimatch@2.0.29",
        "pkg:npm/@types/minimist@1.2.0",
        "pkg:npm/@types/node@6.0.96",
        "pkg:npm/@types/optimist@0.0.29",
        "pkg:npm/@types/yargs@12.0.1",
        "pkg:npm/blocking-proxy@1.0.1",
        "pkg:npm/body-parser@1.18.3",
        "pkg:npm/browserstack@1.5.1",
        "pkg:npm/chai-as-promised@5.3.0",
        "pkg:npm/chai@3.5.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/clang-format@1.0.49",
        "pkg:npm/expect.js@0.3.1",
        "pkg:npm/express@4.16.4",
        "pkg:npm/glob@7.2.3-tuxcare.1",
        "pkg:npm/gulp-clang-format@1.0.23",
        "pkg:npm/gulp-tslint@8.1.3",
        "pkg:npm/gulp@4.0.0",
        "pkg:npm/jasmine@3.99.0-tuxcare.1",
        "pkg:npm/lodash@4.17.11",
        "pkg:npm/marked@0.3.12",
        "pkg:npm/mocha@6.0.2",
        "pkg:npm/optimist@0.6.1-tuxcare.1",
        "pkg:npm/rimraf@2.5.4",
        "pkg:npm/saucelabs@1.5.0",
        "pkg:npm/selenium-webdriver@4.0.0-alpha.1",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/source-map-support@0.4.18",
        "pkg:npm/tslint-eslint-rules@5.4.0",
        "pkg:npm/tslint@5.11.0",
        "pkg:npm/typescript@3.2.2",
        "pkg:npm/vrsource-tslint-rules@4.0.1",
        "pkg:npm/webdriver-manager@13.0.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:npm/bower@1.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-immediate-shim@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/each-async@1.1.1",
      "dependsOn": [
        "pkg:npm/onetime@1.1.0",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array-differ@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@0.1.0",
      "dependsOn": [
        "pkg:npm/array-uniq@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/async@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@2.0.10",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.5.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/globby@0.1.1",
      "dependsOn": [
        "pkg:npm/array-differ@0.1.0",
        "pkg:npm/array-union@0.1.0",
        "pkg:npm/async@0.9.2",
        "pkg:npm/glob@4.5.3"
      ]
    },
    {
      "ref": "pkg:npm/is-path-cwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "dependsOn": [
        "pkg:npm/is-path-inside@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/del@0.1.3",
      "dependsOn": [
        "pkg:npm/each-async@1.1.1",
        "pkg:npm/globby@0.1.1",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/canonical-path@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dependency-graph@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/di@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@3.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/objectdiff@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate.js@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cycle@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eyes@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/winston@2.4.0",
      "dependsOn": [
        "pkg:npm/async@1.0.0",
        "pkg:npm/colors@1.0.3",
        "pkg:npm/cycle@1.0.3",
        "pkg:npm/eyes@0.1.8",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/stack-trace@0.0.10"
      ]
    },
    {
      "ref": "pkg:npm/dgeni@0.4.9",
      "dependsOn": [
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/dependency-graph@0.4.1",
        "pkg:npm/di@0.0.1",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/objectdiff@1.1.0",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@1.4.1",
        "pkg:npm/validate.js@0.9.0",
        "pkg:npm/winston@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore-contrib@0.3.0",
      "dependsOn": [
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/catharsis@0.8.9",
      "dependsOn": [
        "pkg:npm/underscore-contrib@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/lower-case@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sentence-case@1.1.3",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/upper-case@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camel-case@1.2.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/snake-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/constant-case@1.1.2",
      "dependsOn": [
        "pkg:npm/snake-case@1.1.2",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/dot-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/is-lower-case@1.1.3",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/is-upper-case@1.1.2",
      "dependsOn": [
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/lower-case-first@1.0.2",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/param-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/upper-case-first@1.1.2",
      "dependsOn": [
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/pascal-case@1.1.2",
      "dependsOn": [
        "pkg:npm/camel-case@1.2.2",
        "pkg:npm/upper-case-first@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/path-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/swap-case@1.1.2",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/title-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.3",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/change-case@2.3.1",
      "dependsOn": [
        "pkg:npm/camel-case@1.2.2",
        "pkg:npm/constant-case@1.1.2",
        "pkg:npm/dot-case@1.1.2",
        "pkg:npm/is-lower-case@1.1.3",
        "pkg:npm/is-upper-case@1.1.2",
        "pkg:npm/lower-case-first@1.0.2",
        "pkg:npm/lower-case@1.1.4",
        "pkg:npm/param-case@1.1.2",
        "pkg:npm/pascal-case@1.1.2",
        "pkg:npm/path-case@1.1.2",
        "pkg:npm/sentence-case@1.1.3",
        "pkg:npm/snake-case@1.1.2",
        "pkg:npm/swap-case@1.1.2",
        "pkg:npm/title-case@1.1.2",
        "pkg:npm/upper-case-first@1.1.2",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/espree@2.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.3.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.11",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domhandler@2.4.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.6.2",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.9.2",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.4.1",
        "pkg:npm/domutils@1.6.2",
        "pkg:npm/entities@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash@2.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-html-encoder@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async-each@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@1.3.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/minimatch@0.2.14",
        "pkg:npm/readable-stream@1.0.34"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@0.12.6",
      "dependsOn": [
        "pkg:npm/async-each@0.1.6",
        "pkg:npm/readdirp@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/nunjucks@1.3.4",
      "dependsOn": [
        "pkg:npm/chokidar@0.12.6",
        "pkg:npm/optimist@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/q@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/weak-map@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/collections@0.2.2",
      "dependsOn": [
        "pkg:npm/weak-map@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimeparse@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@0.9.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url2@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q-io@1.10.9",
      "dependsOn": [
        "pkg:npm/collections@0.2.2",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/mimeparse@0.1.4",
        "pkg:npm/q@0.9.7",
        "pkg:npm/qs@0.1.0",
        "pkg:npm/url2@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shelljs@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-list@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringmap@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-jar@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@0.0.7",
      "dependsOn": [
        "pkg:npm/delayed-stream@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/form-data@0.0.10",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.7.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.3.8",
      "dependsOn": [
        "pkg:npm/hoek@0.7.6"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.1.3",
      "dependsOn": [
        "pkg:npm/boom@0.3.8"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.1.4",
      "dependsOn": [
        "pkg:npm/hoek@0.7.6"
      ]
    },
    {
      "ref": "pkg:npm/hawk@0.10.2",
      "dependsOn": [
        "pkg:npm/boom@0.3.8",
        "pkg:npm/cryptiles@0.1.3",
        "pkg:npm/hoek@0.7.6",
        "pkg:npm/sntp@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/json-stringify-safe@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-uuid@1.4.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.16.6",
      "dependsOn": [
        "pkg:npm/aws-sign@0.2.0",
        "pkg:npm/cookie-jar@0.2.0",
        "pkg:npm/forever-agent@0.2.0",
        "pkg:npm/form-data@0.0.10",
        "pkg:npm/hawk@0.10.2",
        "pkg:npm/json-stringify-safe@3.0.0",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/node-uuid@1.4.8",
        "pkg:npm/oauth-sign@0.2.0",
        "pkg:npm/qs@0.5.6",
        "pkg:npm/tunnel-agent@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/winston@0.7.3",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/colors@0.6.2",
        "pkg:npm/cycle@1.0.3",
        "pkg:npm/eyes@0.1.8",
        "pkg:npm/pkginfo@0.3.1",
        "pkg:npm/request@2.16.6",
        "pkg:npm/stack-trace@0.0.10"
      ]
    },
    {
      "ref": "pkg:npm/dgeni-packages@0.11.1",
      "dependsOn": [
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/catharsis@0.8.9",
        "pkg:npm/change-case@2.3.1",
        "pkg:npm/dgeni@0.4.9",
        "pkg:npm/espree@2.2.5",
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/htmlparser2@3.9.2",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/marked@0.3.12",
        "pkg:npm/minimatch@0.3.0",
        "pkg:npm/node-html-encoder@0.0.2",
        "pkg:npm/nunjucks@1.3.4",
        "pkg:npm/q-io@1.10.9",
        "pkg:npm/q@1.0.1",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/shelljs@0.5.3",
        "pkg:npm/spdx-license-list@2.1.0",
        "pkg:npm/stringmap@0.2.2",
        "pkg:npm/winston@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deprecated@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glogg@1.0.1",
      "dependsOn": [
        "pkg:npm/sparkles@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/clone@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mixin-deep@1.3.0",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/atob@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-resolve@0.5.1",
      "dependsOn": [
        "pkg:npm/atob@2.0.3",
        "pkg:npm/decode-uri-component@0.2.0",
        "pkg:npm/resolve-url@0.2.1",
        "pkg:npm/source-map-url@0.4.0",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/set-getter@0.1.0",
      "dependsOn": [
        "pkg:npm/to-object-path@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/lazy-cache@2.0.2",
      "dependsOn": [
        "pkg:npm/set-getter@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/use@2.0.2",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/lazy-cache@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon@0.8.1",
      "dependsOn": [
        "pkg:npm/base@0.11.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/source-map-resolve@0.5.1",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/use@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/regex-not@1.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/to-regex@3.0.1",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/regex-not@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/braces@2.3.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fill-range@4.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/snapdragon-node@2.1.1",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/split-string@3.1.0",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-odd@1.0.0",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/nanomatch@1.2.7",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/is-odd@1.0.0",
        "pkg:npm/kind-of@5.1.0",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@3.1.5",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/braces@2.3.0",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/extglob@2.0.4",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/kind-of@6.0.2",
        "pkg:npm/nanomatch@1.2.7",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.0",
        "pkg:npm/snapdragon@0.8.1",
        "pkg:npm/to-regex@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fined@1.1.0",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/object.defaults@1.1.0",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/parse-filepath@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/flagged-respawn@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-iterator@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/once@1.3.3",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@0.1.5",
      "dependsOn": [
        "pkg:npm/once@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/sequencify@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-consume@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/orchestrator@0.3.8",
      "dependsOn": [
        "pkg:npm/end-of-stream@0.1.5",
        "pkg:npm/sequencify@0.0.7",
        "pkg:npm/stream-consume@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/tildify@1.2.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8flags@2.1.1",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/defaults@1.0.3",
      "dependsOn": [
        "pkg:npm/clone@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/find-index@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob2base@0.0.12",
      "dependsOn": [
        "pkg:npm/find-index@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ordered-read-streams@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-stream@3.1.18",
      "dependsOn": [
        "pkg:npm/glob2base@0.0.12",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/ordered-read-streams@0.1.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/unique-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@3.1.21",
      "dependsOn": [
        "pkg:npm/graceful-fs@1.2.3",
        "pkg:npm/inherits@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globule@0.1.0",
      "dependsOn": [
        "pkg:npm/glob@3.1.21",
        "pkg:npm/lodash@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/gaze@0.5.2",
      "dependsOn": [
        "pkg:npm/globule@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-watcher@0.0.6",
      "dependsOn": [
        "pkg:npm/gaze@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/natives@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@3.0.11",
      "dependsOn": [
        "pkg:npm/natives@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@1.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@1.0.0",
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.4.6",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-fs@0.3.14",
      "dependsOn": [
        "pkg:npm/defaults@1.0.3",
        "pkg:npm/glob-stream@3.1.18",
        "pkg:npm/glob-watcher@0.0.6",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/gulp@3.9.1",
      "dependsOn": [
        "pkg:npm/archy@1.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/deprecated@0.0.1",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/interpret@1.1.0",
        "pkg:npm/liftoff@2.5.0",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/orchestrator@0.3.8",
        "pkg:npm/pretty-hrtime@1.0.3",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/tildify@1.2.0",
        "pkg:npm/v8flags@2.1.1",
        "pkg:npm/vinyl-fs@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-with-sourcemaps@1.0.5",
      "dependsOn": [
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cloneable-readable@1.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/vinyl@2.1.0",
      "dependsOn": [
        "pkg:npm/clone-buffer@1.0.0",
        "pkg:npm/clone-stats@1.0.0",
        "pkg:npm/clone@2.1.1",
        "pkg:npm/cloneable-readable@1.0.0",
        "pkg:npm/remove-trailing-separator@1.1.0",
        "pkg:npm/replace-ext@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-concat@2.6.1",
      "dependsOn": [
        "pkg:npm/concat-with-sourcemaps@1.0.5",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/vinyl@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/basic-auth-connect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.2.0",
      "dependsOn": [
        "pkg:npm/ms@0.7.1"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.3.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/statuses@1.2.1",
        "pkg:npm/statuses@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.1.7",
      "dependsOn": [
        "pkg:npm/bytes@2.4.0",
        "pkg:npm/iconv-lite@0.4.13",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.30.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.17",
      "dependsOn": [
        "pkg:npm/mime-db@1.30.0"
      ]
    },
    {
      "ref": "pkg:npm/type-is@1.6.15",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.13.3",
      "dependsOn": [
        "pkg:npm/bytes@2.1.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/iconv-lite@0.4.11",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@4.0.0",
        "pkg:npm/raw-body@2.1.7",
        "pkg:npm/type-is@1.6.15"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.2.13",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/compressible@2.0.12",
      "dependsOn": [
        "pkg:npm/mime-db@1.30.0"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.5.2",
      "dependsOn": [
        "pkg:npm/accepts@1.2.13",
        "pkg:npm/bytes@2.1.0",
        "pkg:npm/compressible@2.0.12",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/vary@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/connect-timeout@1.6.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/on-headers@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-parser@1.3.5",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/rndm@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsscmp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/random-bytes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uid-safe@2.1.4",
      "dependsOn": [
        "pkg:npm/random-bytes@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/csrf@3.0.6",
      "dependsOn": [
        "pkg:npm/rndm@1.2.0",
        "pkg:npm/tsscmp@1.0.5",
        "pkg:npm/uid-safe@2.1.4"
      ]
    },
    {
      "ref": "pkg:npm/csurf@1.8.3",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/csrf@3.0.6",
        "pkg:npm/http-errors@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/accepts@1.3.4",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/errorhandler@1.4.3",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/escape-html@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/crc@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-url@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uid-safe@2.0.0",
      "dependsOn": [
        "pkg:npm/base64-url@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express-session@1.11.3",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/crc@3.3.0",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/uid-safe@2.0.0",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/escape-html@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@0.4.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/method-override@2.3.10",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/basic-auth@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/morgan@1.6.1",
      "dependsOn": [
        "pkg:npm/basic-auth@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/on-headers@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/stream-counter@0.2.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/multiparty@3.3.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/stream-counter@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/pause@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/response-time@2.3.2",
      "dependsOn": [
        "pkg:npm/depd@1.1.2",
        "pkg:npm/on-headers@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/etag@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-favicon@2.3.2",
      "dependsOn": [
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/ms@0.7.2",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.7.3",
      "dependsOn": [
        "pkg:npm/accepts@1.2.13",
        "pkg:npm/batch@0.5.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/range-parser@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.13.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.0.3",
        "pkg:npm/statuses@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.10.3",
      "dependsOn": [
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.13.2"
      ]
    },
    {
      "ref": "pkg:npm/vhost@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@2.30.2",
      "dependsOn": [
        "pkg:npm/basic-auth-connect@1.0.0",
        "pkg:npm/body-parser@1.13.3",
        "pkg:npm/bytes@2.1.0",
        "pkg:npm/compression@1.5.2",
        "pkg:npm/connect-timeout@1.6.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-parser@1.3.5",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/csurf@1.8.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/errorhandler@1.4.3",
        "pkg:npm/express-session@1.11.3",
        "pkg:npm/finalhandler@0.4.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/method-override@2.3.10",
        "pkg:npm/morgan@1.6.1",
        "pkg:npm/multiparty@3.3.2",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/pause@0.1.0",
        "pkg:npm/qs@4.0.0",
        "pkg:npm/response-time@2.3.2",
        "pkg:npm/serve-favicon@2.3.2",
        "pkg:npm/serve-index@1.7.3",
        "pkg:npm/serve-static@1.10.3",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vhost@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/connect-livereload@0.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/split@0.3.3",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner@0.0.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/event-stream@3.3.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.3.3",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/bytes@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/body-parser@1.14.2",
      "dependsOn": [
        "pkg:npm/bytes@2.2.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/iconv-lite@0.4.13",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@5.2.0",
        "pkg:npm/raw-body@2.1.7",
        "pkg:npm/type-is@1.6.15"
      ]
    },
    {
      "ref": "pkg:npm/http-parser-js@0.4.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-extensions@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-driver@0.7.0",
      "dependsOn": [
        "pkg:npm/http-parser-js@0.4.9",
        "pkg:npm/websocket-extensions@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.10.0",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/livereload-js@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tiny-lr@0.2.1",
      "dependsOn": [
        "pkg:npm/body-parser@1.14.2",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/faye-websocket@0.10.0",
        "pkg:npm/livereload-js@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/qs@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-connect@2.3.1",
      "dependsOn": [
        "pkg:npm/connect-livereload@0.5.4",
        "pkg:npm/connect@2.30.2",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/tiny-lr@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clean-css@2.2.23",
      "dependsOn": [
        "pkg:npm/commander@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/aws-sign2@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.1.4",
      "dependsOn": [
        "pkg:npm/async@0.9.2",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.4.2",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.2.2",
      "dependsOn": [
        "pkg:npm/boom@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.2.4",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/hawk@1.1.1",
      "dependsOn": [
        "pkg:npm/boom@0.4.2",
        "pkg:npm/cryptiles@0.2.2",
        "pkg:npm/hoek@0.9.1",
        "pkg:npm/sntp@0.2.4"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctype@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@0.10.1",
      "dependsOn": [
        "pkg:npm/asn1@0.1.11",
        "pkg:npm/assert-plus@0.1.5",
        "pkg:npm/ctype@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/mime-types@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringstream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.3.3",
      "dependsOn": [
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.40.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/hawk@1.1.1",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.8",
        "pkg:npm/oauth-sign@0.3.0",
        "pkg:npm/qs@1.0.2",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.3",
        "pkg:npm/tunnel-agent@0.4.3"
      ]
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/less@1.7.5",
      "dependsOn": [
        "pkg:npm/clean-css@2.2.23",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/request@2.40.0",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/lodash._objecttypes@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isnative@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._shimkeys@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isobject@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.keys@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1",
        "pkg:npm/lodash._shimkeys@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.defaults@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/xtend@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@0.5.1",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/xtend@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "dependsOn": [
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/gulp-less@1.3.9",
      "dependsOn": [
        "pkg:npm/convert-source-map@0.4.1",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/less@1.7.5",
        "pkg:npm/lodash.defaults@2.4.1",
        "pkg:npm/through2@0.5.1",
        "pkg:npm/vinyl-sourcemaps-apply@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/gulp-markdown@1.2.0",
      "dependsOn": [
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/marked@0.3.12",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/graceful-readlink@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.8.1",
      "dependsOn": [
        "pkg:npm/graceful-readlink@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.4.4",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/clean-css@3.4.28",
      "dependsOn": [
        "pkg:npm/commander@2.8.1",
        "pkg:npm/source-map@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/bufferstreams@1.0.1",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-bufferstream@1.0.1",
      "dependsOn": [
        "pkg:npm/bufferstreams@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemaps-apply@0.2.1",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/gulp-clean-css@2.0.6",
      "dependsOn": [
        "pkg:npm/clean-css@3.4.28",
        "pkg:npm/gulp-util@3.0.8",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/vinyl-bufferstream@1.0.1",
        "pkg:npm/vinyl-sourcemaps-apply@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-rename@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/split@0.2.10",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/event-stream@3.0.20",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.0.7",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.2.10",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/binaryextensions@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/textextensions@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istextorbinary@1.0.2",
      "dependsOn": [
        "pkg:npm/binaryextensions@1.0.1",
        "pkg:npm/textextensions@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/replacestream@0.1.3",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/gulp-replace@0.4.0",
      "dependsOn": [
        "pkg:npm/event-stream@3.0.20",
        "pkg:npm/istextorbinary@1.0.2",
        "pkg:npm/replacestream@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/exit@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine-core@2.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine@2.3.2",
      "dependsOn": [
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/jasmine-core@2.3.4"
      ]
    },
    {
      "ref": "pkg:npm/arr-diff@2.0.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array-unique@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@2.1.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/randomatic@1.1.7",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@2.2.3",
      "dependsOn": [
        "pkg:npm/is-number@2.1.0",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/randomatic@1.1.7",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-range@1.8.2",
      "dependsOn": [
        "pkg:npm/fill-range@2.2.3"
      ]
    },
    {
      "ref": "pkg:npm/preserve@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/braces@1.8.5",
      "dependsOn": [
        "pkg:npm/expand-range@1.8.2",
        "pkg:npm/preserve@0.2.0",
        "pkg:npm/repeat-element@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-posix-bracket@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@0.1.5",
      "dependsOn": [
        "pkg:npm/is-posix-bracket@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extglob@0.3.2",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/filename-regex@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/for-own@0.1.5",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.omit@2.0.1",
      "dependsOn": [
        "pkg:npm/for-own@0.1.5",
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@2.0.0",
      "dependsOn": [
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-base@0.3.0",
      "dependsOn": [
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-dotfile@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-glob@3.0.4",
      "dependsOn": [
        "pkg:npm/glob-base@0.3.0",
        "pkg:npm/is-dotfile@1.0.3",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-primitive@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-equal-shallow@0.1.3",
      "dependsOn": [
        "pkg:npm/is-primitive@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regex-cache@0.4.4",
      "dependsOn": [
        "pkg:npm/is-equal-shallow@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@2.3.11",
      "dependsOn": [
        "pkg:npm/arr-diff@2.0.0",
        "pkg:npm/array-unique@0.2.1",
        "pkg:npm/braces@1.8.5",
        "pkg:npm/expand-brackets@0.1.5",
        "pkg:npm/extglob@0.3.2",
        "pkg:npm/filename-regex@2.0.1",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/object.omit@2.0.1",
        "pkg:npm/parse-glob@3.0.4",
        "pkg:npm/regex-cache@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@1.3.2",
      "dependsOn": [
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/normalize-path@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdirp@2.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@1.7.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.2",
        "pkg:npm/async-each@1.0.1",
        "pkg:npm/fsevents@1.2.3",
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/readdirp@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/i@0.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ncp@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utile@0.2.1",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/i@0.3.6",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/ncp@0.4.2",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy@0.10.4",
      "dependsOn": [
        "pkg:npm/colors@0.6.2",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/pkginfo@0.3.1",
        "pkg:npm/utile@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/log4js@0.6.38",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/semver@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64id@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/policyfile@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zeparser@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/active-x-obfuscator@0.0.1",
      "dependsOn": [
        "pkg:npm/zeparser@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/options@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinycolor@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@0.4.32",
      "dependsOn": [
        "pkg:npm/commander@2.1.0",
        "pkg:npm/nan@1.0.0",
        "pkg:npm/options@0.0.6",
        "pkg:npm/tinycolor@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xmlhttprequest@1.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-client@0.9.16",
      "dependsOn": [
        "pkg:npm/active-x-obfuscator@0.0.1",
        "pkg:npm/uglify-js@1.2.5",
        "pkg:npm/ws@0.4.32",
        "pkg:npm/xmlhttprequest@1.4.2"
      ]
    },
    {
      "ref": "pkg:npm/redis@0.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io@0.9.16",
      "dependsOn": [
        "pkg:npm/base64id@0.1.0",
        "pkg:npm/policyfile@0.0.4",
        "pkg:npm/redis@0.7.3",
        "pkg:npm/socket.io-client@0.9.16"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.33",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/useragent@2.2.1",
      "dependsOn": [
        "pkg:npm/lru-cache@2.2.4",
        "pkg:npm/tmp@0.0.33"
      ]
    },
    {
      "ref": "pkg:npm/karma@0.12.37",
      "dependsOn": [
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/colors@1.1.2",
        "pkg:npm/connect@2.30.2",
        "pkg:npm/di@0.0.1",
        "pkg:npm/glob@5.0.15",
        "pkg:npm/graceful-fs@3.0.11",
        "pkg:npm/http-proxy@0.10.4",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/log4js@0.6.38",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@1.4.1",
        "pkg:npm/rimraf@2.6.2",
        "pkg:npm/socket.io@0.9.16",
        "pkg:npm/source-map@0.4.4",
        "pkg:npm/useragent@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/karma-chrome-launcher@0.1.12",
      "dependsOn": [
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/karma-jasmine@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/website@0.0.1",
      "dependsOn": [
        "pkg:npm/bower@1.8.2",
        "pkg:npm/del@0.1.3",
        "pkg:npm/dgeni-packages@0.11.1",
        "pkg:npm/dgeni@0.4.9",
        "pkg:npm/esprima@1.1.0",
        "pkg:npm/gulp-clean-css@2.0.6",
        "pkg:npm/gulp-concat@2.6.1",
        "pkg:npm/gulp-connect@2.3.1",
        "pkg:npm/gulp-less@1.3.9",
        "pkg:npm/gulp-markdown@1.2.0",
        "pkg:npm/gulp-rename@1.2.2",
        "pkg:npm/gulp-replace@0.4.0",
        "pkg:npm/gulp@3.9.1",
        "pkg:npm/jasmine@2.3.2",
        "pkg:npm/karma-chrome-launcher@0.1.12",
        "pkg:npm/karma-jasmine@0.1.6",
        "pkg:npm/karma@0.12.37",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/marked@0.3.12"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@angular/common@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/compiler@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/core@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/http@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/platform-browser@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/animations@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/platform-browser-dynamic@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/router@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@angular/upgrade@5.0.0-beta.7",
      "dependsOn": [
        "pkg:npm/tslib@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/angular@1.6.39",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/core-js@0.9.43",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@6.0.93",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/reflect-metadata@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/symbol-observable@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rxjs@5.4.3",
      "dependsOn": [
        "pkg:npm/symbol-observable@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/when@3.7.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/systemjs@0.19.27",
      "dependsOn": [
        "pkg:npm/when@3.7.8"
      ]
    },
    {
      "ref": "pkg:npm/zone.js@0.8.18",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bluebird@2.9.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@0.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@0.3.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@0.5.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@1.1.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@0.1.0",
        "pkg:npm/strip-ansi@0.3.0",
        "pkg:npm/supports-color@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-spawn@0.2.9",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/moment@2.19.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rx@2.3.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concurrently@2.2.0",
      "dependsOn": [
        "pkg:npm/bluebird@2.9.6",
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/commander@2.6.0",
        "pkg:npm/cross-spawn@0.2.9",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/moment@2.19.4",
        "pkg:npm/rx@2.3.24"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@1.0.10",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.2",
        "pkg:npm/ipaddr.js@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/destroy@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.13.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/destroy@1.0.3",
        "pkg:npm/escape-html@1.0.2",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/http-errors@1.3.1",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.0.3",
        "pkg:npm/statuses@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.13.3",
      "dependsOn": [
        "pkg:npm/accepts@1.2.13",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/content-disposition@0.5.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/depd@1.0.1",
        "pkg:npm/escape-html@1.0.2",
        "pkg:npm/etag@1.7.0",
        "pkg:npm/finalhandler@0.4.0",
        "pkg:npm/fresh@0.3.0",
        "pkg:npm/merge-descriptors@1.0.0",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@1.0.10",
        "pkg:npm/qs@4.0.0",
        "pkg:npm/range-parser@1.0.3",
        "pkg:npm/send@0.13.0",
        "pkg:npm/serve-static@1.10.3",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vary@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-sync-client@2.5.1",
      "dependsOn": [
        "pkg:npm/etag@1.7.0",
        "pkg:npm/fresh@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/async-each-series@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect-history-api-fallback@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/immutable@3.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/server-destroy@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/limiter@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-throttle@0.1.3",
      "dependsOn": [
        "pkg:npm/commander@2.6.0",
        "pkg:npm/limiter@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/formidable@1.0.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@1.9.2",
      "dependsOn": [
        "pkg:npm/formidable@1.0.17",
        "pkg:npm/mime@1.2.4",
        "pkg:npm/qs@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@2.5.11",
      "dependsOn": [
        "pkg:npm/connect@1.9.2",
        "pkg:npm/mime@1.2.4",
        "pkg:npm/mkdirp@0.3.0",
        "pkg:npm/qs@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/nopt@3.0.6",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV",
      "dependsOn": [
        "pkg:npm/express@2.5.11",
        "pkg:npm/nopt@3.0.6",
        "pkg:npm/underscore@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/browser-sync-ui@0.6.3",
      "dependsOn": [
        "pkg:npm/async-each-series@0.1.1",
        "pkg:npm/connect-history-api-fallback@1.5.0",
        "pkg:npm/immutable@3.8.1",
        "pkg:npm/server-destroy@1.0.1",
        "pkg:npm/stream-throttle@0.1.3",
        "pkg:npm/weinre@2.0.0-pre-I0Z7U9OV"
      ]
    },
    {
      "ref": "pkg:npm/bs-recipes@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-extend@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.6",
      "dependsOn": [
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.9.1",
      "dependsOn": [
        "pkg:npm/detect-libc@1.0.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/needle@2.2.0",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npm-packlist@1.1.10",
        "pkg:npm/npmlog@4.1.2",
        "pkg:npm/rc@1.2.6",
        "pkg:npm/rimraf@2.6.2",
        "pkg:npm/semver@5.5.0",
        "pkg:npm/tar@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.2.3",
      "dependsOn": [
        "pkg:npm/nan@2.10.0",
        "pkg:npm/node-pre-gyp@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/statuses@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@0.5.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/connect@3.5.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/finalhandler@0.5.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dev-ip@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/easy-extender@2.3.2",
      "dependsOn": [
        "pkg:npm/lodash@3.10.1"
      ]
    },
    {
      "ref": "pkg:npm/object-path@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tfunk@3.1.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/object-path@0.9.2"
      ]
    },
    {
      "ref": "pkg:npm/eazy-logger@3.0.2",
      "dependsOn": [
        "pkg:npm/tfunk@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/emitter-steward@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jsonfile@3.0.1",
        "pkg:npm/universalify@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/eventemitter3@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requires-port@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy@1.15.2",
      "dependsOn": [
        "pkg:npm/eventemitter3@1.2.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.8",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/openurl@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.5",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.1.4",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/co@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@4.11.8",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@4.2.1",
      "dependsOn": [
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/har-schema@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/hoek@2.16.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@2.10.1",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@2.0.5",
      "dependsOn": [
        "pkg:npm/boom@2.10.1"
      ]
    },
    {
      "ref": "pkg:npm/sntp@1.0.9",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/hawk@3.1.3",
      "dependsOn": [
        "pkg:npm/boom@2.10.1",
        "pkg:npm/cryptiles@2.0.5",
        "pkg:npm/hoek@2.16.3",
        "pkg:npm/sntp@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.1",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.13.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.1.1",
      "dependsOn": [
        "pkg:npm/assert-plus@0.2.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.13.1"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uuid@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.81.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.6.0",
        "pkg:npm/aws4@1.6.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/extend@3.0.1",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.1.4",
        "pkg:npm/har-validator@4.2.1",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/http-signature@1.1.1",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/oauth-sign@0.8.2",
        "pkg:npm/performance-now@0.2.0",
        "pkg:npm/qs@6.4.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.3",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.29.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/window-size@0.1.4",
        "pkg:npm/y18n@3.2.1"
      ]
    },
    {
      "ref": "pkg:npm/localtunnel@1.8.3",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/openurl@1.1.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/yargs@3.29.0"
      ]
    },
    {
      "ref": "pkg:npm/opn@4.0.2",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isfinite@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number-like@1.0.8",
      "dependsOn": [
        "pkg:npm/lodash.isfinite@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/portscanner@2.1.1",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/is-number-like@1.0.8"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resp-modifier@6.0.2",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/rx@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.5.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.0.2",
        "pkg:npm/statuses@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-index@1.8.0",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/batch@0.5.3",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.5.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.4",
      "dependsOn": [
        "pkg:npm/ms@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.2",
      "dependsOn": [
        "pkg:npm/depd@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.0.3",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ms@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.15.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.4",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.0",
        "pkg:npm/http-errors@1.6.2",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@1.0.0",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.12.2",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.15.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.3.3",
      "dependsOn": [
        "pkg:npm/ms@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/accepts@1.3.3",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/after@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arraybuffer.slice@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-arraybuffer@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blob@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-binary@0.1.6",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wtf-8@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-parser@1.3.1",
      "dependsOn": [
        "pkg:npm/after@0.8.1",
        "pkg:npm/arraybuffer.slice@0.0.6",
        "pkg:npm/base64-arraybuffer@0.1.5",
        "pkg:npm/blob@0.0.4",
        "pkg:npm/has-binary@0.1.6",
        "pkg:npm/wtf-8@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ultron@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@1.1.1",
      "dependsOn": [
        "pkg:npm/options@0.0.6",
        "pkg:npm/ultron@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/engine.io@1.8.0",
      "dependsOn": [
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/base64id@0.1.0",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io-parser@1.3.1",
        "pkg:npm/ws@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-binary@0.1.7",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-emitter@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json3@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-parser@2.3.1",
      "dependsOn": [
        "pkg:npm/component-emitter@1.1.2",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/json3@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/socket.io-adapter@0.5.0",
      "dependsOn": [
        "pkg:npm/debug@2.3.3",
        "pkg:npm/socket.io-parser@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/backo2@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-bind@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-inherit@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-cors@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/indexof@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsite@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/better-assert@1.0.2",
      "dependsOn": [
        "pkg:npm/callsite@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/parsejson@0.0.3",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseqs@0.0.5",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseuri@0.0.5",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xmlhttprequest-ssl@1.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yeast@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-client@1.8.0",
      "dependsOn": [
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/component-inherit@0.0.3",
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io-parser@1.3.1",
        "pkg:npm/has-cors@1.1.0",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/parsejson@0.0.3",
        "pkg:npm/parseqs@0.0.5",
        "pkg:npm/parseuri@0.0.5",
        "pkg:npm/ws@1.1.1",
        "pkg:npm/xmlhttprequest-ssl@1.5.3",
        "pkg:npm/yeast@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/object-component@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-array@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-client@1.6.0",
      "dependsOn": [
        "pkg:npm/backo2@1.0.2",
        "pkg:npm/component-bind@1.0.0",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io-client@1.8.0",
        "pkg:npm/has-binary@0.1.7",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/object-component@0.0.3",
        "pkg:npm/parseuri@0.0.5",
        "pkg:npm/socket.io-parser@2.3.1",
        "pkg:npm/to-array@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/socket.io@1.6.0",
      "dependsOn": [
        "pkg:npm/debug@2.3.3",
        "pkg:npm/engine.io@1.8.0",
        "pkg:npm/has-binary@0.1.7",
        "pkg:npm/object-assign@4.1.0",
        "pkg:npm/socket.io-adapter@0.5.0",
        "pkg:npm/socket.io-client@1.6.0",
        "pkg:npm/socket.io-parser@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ua-parser-js@0.7.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.1",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-correct@1.0.2",
      "dependsOn": [
        "pkg:npm/spdx-license-ids@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-correct@1.0.2",
        "pkg:npm/spdx-expression-parse@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/window-size@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@4.2.1",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@6.4.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/window-size@0.2.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/browser-sync@2.18.13",
      "dependsOn": [
        "pkg:npm/browser-sync-client@2.5.1",
        "pkg:npm/browser-sync-ui@0.6.3",
        "pkg:npm/bs-recipes@1.3.4",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/connect@3.5.0",
        "pkg:npm/dev-ip@1.0.1",
        "pkg:npm/easy-extender@2.3.2",
        "pkg:npm/eazy-logger@3.0.2",
        "pkg:npm/emitter-steward@1.0.0",
        "pkg:npm/fs-extra@3.0.1",
        "pkg:npm/http-proxy@1.15.2",
        "pkg:npm/immutable@3.8.1",
        "pkg:npm/localtunnel@1.8.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/opn@4.0.2",
        "pkg:npm/portscanner@2.1.1",
        "pkg:npm/qs@6.2.1",
        "pkg:npm/resp-modifier@6.0.2",
        "pkg:npm/rx@4.1.0",
        "pkg:npm/serve-index@1.8.0",
        "pkg:npm/serve-static@1.12.2",
        "pkg:npm/server-destroy@1.0.1",
        "pkg:npm/socket.io-client@1.6.0",
        "pkg:npm/socket.io@1.6.0",
        "pkg:npm/ua-parser-js@0.7.12",
        "pkg:npm/yargs@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/connect-logger@0.0.1",
      "dependsOn": [
        "pkg:npm/moment@2.19.4"
      ]
    },
    {
      "ref": "pkg:npm/lite-server@2.2.0",
      "dependsOn": [
        "pkg:npm/browser-sync@2.18.13",
        "pkg:npm/connect-history-api-fallback@1.5.0",
        "pkg:npm/connect-logger@0.0.1",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/minimist@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/typescript@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/testapp@0.0.1",
      "dependsOn": [
        "pkg:npm/@angular/animations@5.0.0-beta.7",
        "pkg:npm/@angular/common@5.0.0-beta.7",
        "pkg:npm/@angular/compiler@5.0.0-beta.7",
        "pkg:npm/@angular/core@5.0.0-beta.7",
        "pkg:npm/@angular/http@5.0.0-beta.7",
        "pkg:npm/@angular/platform-browser-dynamic@5.0.0-beta.7",
        "pkg:npm/@angular/platform-browser@5.0.0-beta.7",
        "pkg:npm/@angular/router@5.0.0-beta.7",
        "pkg:npm/@angular/upgrade@5.0.0-beta.7",
        "pkg:npm/@types/angular@1.6.39",
        "pkg:npm/@types/core-js@0.9.43",
        "pkg:npm/@types/node@6.0.93",
        "pkg:npm/concurrently@2.2.0",
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/express@4.13.3",
        "pkg:npm/lite-server@2.2.0",
        "pkg:npm/reflect-metadata@0.1.3",
        "pkg:npm/rxjs@5.4.3",
        "pkg:npm/systemjs@0.19.27",
        "pkg:npm/typescript@2.6.2",
        "pkg:npm/zone.js@0.8.18"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/protractor@6.0.0-tuxcare.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-30T10:51:06Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, October 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'protractor' with version '6.0.0-tuxcare.2'. The application also has 2 child modules/components. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 4 source files."
    }
  ]
}