{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:b7d5d9fa-1492-4c91-9294-07dda55c2180",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-27T14:53:27Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "utils",
      "group": "@graphql-tools",
      "version": "12.0.0-tuxcare.1",
      "description": "Common package containing utils and types for GraphQL tools",
      "purl": "pkg:npm/%40graphql-tools/utils@12.0.0-tuxcare.1",
      "bom-ref": "pkg:npm/@graphql-tools/utils@12.0.0-tuxcare.1",
      "author": "Dotan Simha <dotansimha@gmail.com>",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@graphql-hive\\n@graphql-tools\\n@graphql-typed-document-node\\n@repeaterjs\\n@types\\n@whatwg-node"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@graphql-typed-document-node",
      "name": "core",
      "version": "3.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "981f6802c3429bd68cdff48ebf862d04ca996d88f5d11edd92af1bc81ab1198fe7705c217f6a10ccc57e2c24655a80d210127708e891d72783bccb6ca0eb2e15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-typed-document-node/core@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-typed-document-node/core/-/core-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-typed-document-node/core@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-typed-document-node/core/-/core-3.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@graphql-typed-document-node/core,TypedDocumentNode,@graphql-typed-document-node/core/TypedDocumentNode"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/Interfaces.ts",
            "line": 50
          }
        ]
      }
    },
    {
      "group": "@whatwg-node",
      "name": "promise-helpers",
      "version": "1.3.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36cb7925d2b8ed5225f54706c2dbf645c8329f9956b59d3f9a1450e06f0d3768acc69ab64cedf48aa1f39b0a09c9c8d6bb251f8371855ea3ff8051d7795e7b20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40whatwg-node/promise-helpers@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@whatwg-node/promise-helpers/-/promise-helpers-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@whatwg-node/promise-helpers/-/promise-helpers-1.3.2.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "@whatwg-node/promise-helpers,mapAsyncIterator,@whatwg-node/promise-helpers/mapAsyncIterator,mapMaybePromise,@whatwg-node/promise-helpers/mapMaybePromise,fakePromise,@whatwg-node/promise-helpers/fakePromise,createDeferred,@whatwg-node/promise-helpers/createDeferred"
        },
        {
          "name": "ImportedModules",
          "value": "@whatwg-node/promise-helpers,handleMaybePromise,@whatwg-node/promise-helpers/handleMaybePromise,isPromise,@whatwg-node/promise-helpers/isPromise,fakePromise,@whatwg-node/promise-helpers/fakePromise,fakeRejectPromise,@whatwg-node/promise-helpers/fakeRejectPromise,MaybePromise,@whatwg-node/promise-helpers/MaybePromise"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cjs/index.js",
            "line": 63
          },
          {
            "location": "dist/cjs/jsutils.js",
            "line": 8
          },
          {
            "location": "dist/cjs/observableToAsyncIterable.js",
            "line": 4
          },
          {
            "location": "dist/cjs/registerAbortSignalListener.js",
            "line": 5
          },
          {
            "location": "dist/esm/index.js",
            "line": 58
          },
          {
            "location": "dist/esm/jsutils.js",
            "line": 1
          },
          {
            "location": "dist/esm/jsutils.js",
            "line": 12
          },
          {
            "location": "dist/esm/observableToAsyncIterable.js",
            "line": 1
          },
          {
            "location": "dist/esm/observableToAsyncIterable.js",
            "line": 72
          },
          {
            "location": "dist/esm/observableToAsyncIterable.js",
            "line": 76
          },
          {
            "location": "dist/esm/registerAbortSignalListener.js",
            "line": 1
          },
          {
            "location": "dist/esm/registerAbortSignalListener.js",
            "line": 31
          },
          {
            "location": "src/executor.ts",
            "line": 1
          },
          {
            "location": "src/executor.ts",
            "line": 4
          },
          {
            "location": "src/index.ts",
            "line": 63
          },
          {
            "location": "src/jsutils.ts",
            "line": 1
          },
          {
            "location": "src/jsutils.ts",
            "line": 21
          },
          {
            "location": "src/observableToAsyncIterable.ts",
            "line": 1
          },
          {
            "location": "src/observableToAsyncIterable.ts",
            "line": 92
          },
          {
            "location": "src/observableToAsyncIterable.ts",
            "line": 96
          },
          {
            "location": "src/registerAbortSignalListener.ts",
            "line": 1
          },
          {
            "location": "src/registerAbortSignalListener.ts",
            "line": 38
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.8.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0916ef781d06fe29576e49440bef09e99aa9df98bb0e03f9c087a6fa107d30084a0ad3f98f79753a737c0a0d5f373243ae1cf447b525ca294f7d2016b34bfdb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tslib@2.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "tslib"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cjs/index.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-inspect",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3dcc35253bd92d2247f378a2196b7a7d1713f818d99420d157060b6d4707ceffc246907baf43254ab19b23242f5523721a76edec6e005eec828834773cebd9d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-inspect@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-inspect/-/cross-inspect-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-inspect@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-inspect/-/cross-inspect-1.0.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "cross-inspect"
        },
        {
          "name": "ImportedModules",
          "value": "cross-inspect,inspect,cross-inspect/inspect"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cjs/astFromType.js",
            "line": 4
          },
          {
            "location": "dist/cjs/getArgumentValues.js",
            "line": 4
          },
          {
            "location": "dist/cjs/index.js",
            "line": 51
          },
          {
            "location": "dist/esm/astFromType.js",
            "line": 1
          },
          {
            "location": "dist/esm/astFromType.js",
            "line": 7
          },
          {
            "location": "dist/esm/getArgumentValues.js",
            "line": 1
          },
          {
            "location": "dist/esm/getArgumentValues.js",
            "line": 35
          },
          {
            "location": "dist/esm/getArgumentValues.js",
            "line": 50
          },
          {
            "location": "dist/esm/getArgumentValues.js",
            "line": 60
          },
          {
            "location": "dist/esm/index.js",
            "line": 47
          },
          {
            "location": "src/astFromType.ts",
            "line": 1
          },
          {
            "location": "src/astFromType.ts",
            "line": 9
          },
          {
            "location": "src/getArgumentValues.ts",
            "line": 1
          },
          {
            "location": "src/getArgumentValues.ts",
            "line": 56
          },
          {
            "location": "src/getArgumentValues.ts",
            "line": 75
          },
          {
            "location": "src/getArgumentValues.ts",
            "line": 89
          },
          {
            "location": "src/index.ts",
            "line": 47
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "stitch",
      "version": "10.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bce40e8e0c54ef985b6edd4743ff8a7e6b8e33e04b19b0c9cc28296a415e52a3e6dab3d81cd0a7822edc6ea29e40d749a4dbc471ceefe391a92644ac3558f60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/stitch@10.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/stitch/-/stitch-10.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/stitch@10.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/stitch/-/stitch-10.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "batch-delegate",
      "version": "10.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7f2fda0d177de000ec1cef040bcbfafd9b753e84247f7afe61406143445ce753a3e59b9618e7bd2ec15ba982ec6e3dd75e13e576a1895ee63baa75f3203b4db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/batch-delegate@10.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/batch-delegate/-/batch-delegate-10.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/batch-delegate@10.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/batch-delegate/-/batch-delegate-10.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "delegate",
      "version": "12.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fb8e8afcb3533942499fc240a5c89450289df423e98b36f995df9fd054642435472d3a4aa4d7b6e9b374c24bf742d625412005143b9354a694c9ebf180726c8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/delegate@12.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/delegate/-/delegate-12.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/delegate@12.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/delegate/-/delegate-12.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "batch-execute",
      "version": "10.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a3e3acc1d79c3866fb57e1d34038e99dabef7484a1a3e33373496950bb6dec4161333d30361863b935c18816077ea1386c7f8caa83870adab847f68ecba0ce9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/batch-execute@10.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/batch-execute/-/batch-execute-10.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/batch-execute@10.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/batch-execute/-/batch-execute-10.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-hive",
      "name": "signal",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6299fb074d390b5806c539fc6f472033b624107907da09aacbbf0ee9777f0f1f35946a8b93f4d78772318220519583a86aa81f8eab12d766bfbcdad547102825"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-hive/signal@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-hive/signal/-/signal-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-hive/signal@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-hive/signal/-/signal-2.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "utils",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa63ae217eeef37fc11c6d0bf49be23332a27758f7e5cc4e5a12e8a31e3b4d71c027a4e79f7d1182b98440f9a4d458666906e12447306010d5ca2794bd9a2927"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/utils@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/utils/-/utils-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/utils@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/utils/-/utils-12.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@whatwg-node",
      "name": "promise-helpers",
      "version": "2.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce25609b4d40f62acf2d505a5057a2eb8aa9efbd41ac35e575bbf9a58ea480580db40fbbceaf2ec7a9e3ffac3c6c42c61fff93b6773bea8c74e0722353c9eabe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40whatwg-node/promise-helpers@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@whatwg-node/promise-helpers/-/promise-helpers-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@whatwg-node/promise-helpers@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@whatwg-node/promise-helpers/-/promise-helpers-2.0.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "@whatwg-node/promise-helpers,mapAsyncIterator,@whatwg-node/promise-helpers/mapAsyncIterator,mapMaybePromise,@whatwg-node/promise-helpers/mapMaybePromise,fakePromise,@whatwg-node/promise-helpers/fakePromise,createDeferred,@whatwg-node/promise-helpers/createDeferred"
        },
        {
          "name": "ImportedModules",
          "value": "@whatwg-node/promise-helpers,handleMaybePromise,@whatwg-node/promise-helpers/handleMaybePromise,isPromise,@whatwg-node/promise-helpers/isPromise,fakePromise,@whatwg-node/promise-helpers/fakePromise,fakeRejectPromise,@whatwg-node/promise-helpers/fakeRejectPromise,MaybePromise,@whatwg-node/promise-helpers/MaybePromise"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/cjs/index.js",
            "line": 63
          },
          {
            "location": "dist/cjs/jsutils.js",
            "line": 8
          },
          {
            "location": "dist/cjs/observableToAsyncIterable.js",
            "line": 4
          },
          {
            "location": "dist/cjs/registerAbortSignalListener.js",
            "line": 5
          },
          {
            "location": "dist/esm/index.js",
            "line": 58
          },
          {
            "location": "dist/esm/jsutils.js",
            "line": 1
          },
          {
            "location": "dist/esm/jsutils.js",
            "line": 12
          },
          {
            "location": "dist/esm/observableToAsyncIterable.js",
            "line": 1
          },
          {
            "location": "dist/esm/observableToAsyncIterable.js",
            "line": 72
          },
          {
            "location": "dist/esm/observableToAsyncIterable.js",
            "line": 76
          },
          {
            "location": "dist/esm/registerAbortSignalListener.js",
            "line": 1
          },
          {
            "location": "dist/esm/registerAbortSignalListener.js",
            "line": 31
          },
          {
            "location": "src/executor.ts",
            "line": 1
          },
          {
            "location": "src/executor.ts",
            "line": 4
          },
          {
            "location": "src/index.ts",
            "line": 63
          },
          {
            "location": "src/jsutils.ts",
            "line": 1
          },
          {
            "location": "src/jsutils.ts",
            "line": 21
          },
          {
            "location": "src/observableToAsyncIterable.ts",
            "line": 1
          },
          {
            "location": "src/observableToAsyncIterable.ts",
            "line": 92
          },
          {
            "location": "src/observableToAsyncIterable.ts",
            "line": 96
          },
          {
            "location": "src/registerAbortSignalListener.ts",
            "line": 1
          },
          {
            "location": "src/registerAbortSignalListener.ts",
            "line": 38
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dataloader",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb692bb4048836d3c54b5ad20e369cac5827d5d714ba844455a6f094e18e7b849dc5e9d112ac23c2312501dc2f6c633b920673f5adca56271647bbdccfcae7cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dataloader@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dataloader/-/dataloader-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dataloader@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dataloader/-/dataloader-2.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "executor",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "451e3513caf514aac78594b962175c520d38199e553fa54668ed8c40a9261046b35f1eaa63892ecd960bb3892af830733dd366b11755b1fecafee4df8b97e100"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/executor@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/executor/-/executor-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/executor@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/executor/-/executor-2.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@repeaterjs",
      "name": "repeater",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4daa1592c6514b1d8a598629c8b42d3105d7792f7c56c819226cd6eb9c6689581b6215cb93e684b26ccf2e2aea56e138fd7b946a91f688cb71533681343cdd49"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40repeaterjs/repeater@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@repeaterjs/repeater/-/repeater-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@repeaterjs/repeater@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@repeaterjs/repeater/-/repeater-3.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@whatwg-node",
      "name": "disposablestack",
      "version": "0.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24d00f7e0fe99d79bdf0d46342a55afeda05552d158aa3d6309bfc2136ca1648d7cd8378cdc52d3fc1417a3525186df3ad146bb6c198099cb8dab1b69011fbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40whatwg-node/disposablestack@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@whatwg-node/disposablestack/-/disposablestack-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@whatwg-node/disposablestack@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@whatwg-node/disposablestack/-/disposablestack-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "schema",
      "version": "10.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1743a7c346414446a4286a9c82c2a17520a33978269edcd058bd1003efd6af02a69c9ee7251c8629425abf0b9564bd93ad76e568852f4319b8b7587716e03770"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/schema@10.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/schema/-/schema-10.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/schema@10.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/schema/-/schema-10.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "merge",
      "version": "9.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ac084989f5120c4f82c1ff58c16f22877bba4c2257c684b010d0554d699aad7b2743502fab4c8f7067ec9a2aac50a4f385172703f94b4c868be0d7d94fabdd9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/merge@9.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/merge/-/merge-9.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/merge@9.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/merge/-/merge-9.2.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@graphql-tools",
      "name": "wrap",
      "version": "11.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "159d52d1f8abd02f688440b7c8ddf2c039a85f0f60c06ace8aa3326c44538f022a2e71f34f18bc00726f7a73462cf2c34cc94be6dde767c5fa134f6c91722acb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-tools/wrap@11.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@graphql-tools/wrap/-/wrap-11.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-tools/wrap@11.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@graphql-tools/wrap/-/wrap-11.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "dateformat",
      "version": "3.0.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a53cf76291a82f2fa10b8d6b258dbc8320fccd09e962624a91a48fb379af7dbc105b08803924db21640c1029338dd77f5cf3bcbdaaf4c5560905775e2bb52e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/dateformat@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/dateformat/-/dateformat-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/dateformat@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/dateformat/-/dateformat-3.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/dateformat"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "4.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8fd29d29146cc74b910c9e1771422eda24dfa23217ae7745211b87651350cb025bcbf091e32494d7fc24a6e095f057429ae671a4df30b999c6f96d4414c7130"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dateformat@4.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-4.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@4.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-4.6.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graphql-scalars",
      "version": "1.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f4c725d97911649dee04abb3409cbe34d204ad1aa1bf4b1f55a97d00d399c7c846efe7b5099d62ac8cd9eba55aafe5effc375314c64b74c307115db8b229c16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graphql-scalars@1.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graphql-scalars/-/graphql-scalars-1.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphql-scalars@1.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graphql-scalars/-/graphql-scalars-1.25.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@graphql-typed-document-node/core@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@2.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/cross-inspect@1.0.1",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-hive/signal@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@whatwg-node/promise-helpers@2.0.1",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/utils@12.1.0",
      "dependsOn": [
        "pkg:npm/@graphql-typed-document-node/core@3.2.0",
        "pkg:npm/@whatwg-node/promise-helpers@2.0.1",
        "pkg:npm/cross-inspect@1.0.1",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/dataloader@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@graphql-tools/batch-execute@10.3.0",
      "dependsOn": [
        "pkg:npm/@graphql-hive/signal@2.1.0",
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
        "pkg:npm/dataloader@2.2.3",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@repeaterjs/repeater@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@whatwg-node/disposablestack@0.1.0",
      "dependsOn": [
        "pkg:npm/@whatwg-node/promise-helpers@2.0.1",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/executor@2.1.0",
      "dependsOn": [
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/@graphql-typed-document-node/core@3.2.0",
        "pkg:npm/@repeaterjs/repeater@3.1.0",
        "pkg:npm/@whatwg-node/disposablestack@0.1.0",
        "pkg:npm/@whatwg-node/promise-helpers@2.0.1",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/merge@9.2.8",
      "dependsOn": [
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/schema@10.1.5",
      "dependsOn": [
        "pkg:npm/@graphql-tools/merge@9.2.8",
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/delegate@12.3.0",
      "dependsOn": [
        "pkg:npm/@graphql-tools/batch-execute@10.3.0",
        "pkg:npm/@graphql-tools/executor@2.1.0",
        "pkg:npm/@graphql-tools/schema@10.1.5",
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
        "pkg:npm/dataloader@2.2.3",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/batch-delegate@10.1.2",
      "dependsOn": [
        "pkg:npm/@graphql-tools/delegate@12.3.0",
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
        "pkg:npm/dataloader@2.2.3",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/wrap@11.2.2",
      "dependsOn": [
        "pkg:npm/@graphql-tools/delegate@12.3.0",
        "pkg:npm/@graphql-tools/schema@10.1.5",
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/stitch@10.4.0",
      "dependsOn": [
        "pkg:npm/@graphql-tools/batch-delegate@10.1.2",
        "pkg:npm/@graphql-tools/delegate@12.3.0",
        "pkg:npm/@graphql-tools/executor@2.1.0",
        "pkg:npm/@graphql-tools/merge@9.2.8",
        "pkg:npm/@graphql-tools/schema@10.1.5",
        "pkg:npm/@graphql-tools/utils@12.1.0",
        "pkg:npm/@graphql-tools/wrap@11.2.2",
        "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/dateformat@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dateformat@4.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graphql-scalars@1.25.0",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@graphql-tools/utils@12.0.0-tuxcare.1",
      "dependsOn": [
        "pkg:npm/@graphql-tools/stitch@10.4.0",
        "pkg:npm/@graphql-typed-document-node/core@3.2.0",
        "pkg:npm/@types/dateformat@3.0.1",
        "pkg:npm/@whatwg-node/promise-helpers@1.3.2",
        "pkg:npm/cross-inspect@1.0.1",
        "pkg:npm/dateformat@4.6.3",
        "pkg:npm/graphql-scalars@1.25.0",
        "pkg:npm/tslib@2.8.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@graphql-tools/utils@12.0.0-tuxcare.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-27T14:53:27Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, October 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'utils' with version '12.0.0-tuxcare.1'. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}