{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:22cec075-e421-4606-a824-73beea0ab0df",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-10T12:21:05Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "async",
      "group": "",
      "version": "2.5.0",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "purl": "pkg:npm/async@2.5.0",
      "bom-ref": "pkg:npm/async@2.5.0",
      "author": "Caolan McMahon",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "coverage, coveralls, jsdoc, lint, mocha-browser-test, mocha-node-test, mocha-test, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/caolan/async.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "bower.json\\nbuild/bower.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "async",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/async",
      "type": "library",
      "bom-ref": "pkg:npm/async",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bower.json"
        },
        {
          "name": "SrcFile",
          "value": "build/bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/bower.json"
              }
            ],
            "concludedValue": "build/bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.16.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d22c9ac660288f3843e16ba7d2b5d06cca27d777"
        }
      ],
      "purl": "pkg:npm/lodash@4.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.16.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.17.4 used instead of 4.16.6"
        },
        {
          "name": "ImportedModules",
          "value": "lodash/isObject,lodash/_arrayEach,lodash/_baseForOwn,lodash/_baseIndexOf,lodash/isArray,lodash/keys,lodash/noop,lodash/_arrayMap,lodash/trim,lodash/identity,lodash/isArrayLike,lodash/_baseProperty,lodash/constant,lodash/_baseRange,lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/asyncify.js",
            "line": 8
          },
          {
            "location": "lib/asyncify.js",
            "line": 1
          },
          {
            "location": "lib/asyncify.js",
            "line": 70
          },
          {
            "location": "build/auto.js",
            "line": 167
          },
          {
            "location": "build/auto.js",
            "line": 171
          },
          {
            "location": "build/auto.js",
            "line": 175
          },
          {
            "location": "build/auto.js",
            "line": 179
          },
          {
            "location": "build/auto.js",
            "line": 183
          },
          {
            "location": "build/auto.js",
            "line": 187
          },
          {
            "location": "build/autoInject.js",
            "line": 12
          },
          {
            "location": "build/autoInject.js",
            "line": 16
          },
          {
            "location": "build/autoInject.js",
            "line": 20
          },
          {
            "location": "build/autoInject.js",
            "line": 24
          },
          {
            "location": "build/concatLimit.js",
            "line": 27
          },
          {
            "location": "build/detect.js",
            "line": 7
          },
          {
            "location": "build/detectLimit.js",
            "line": 7
          },
          {
            "location": "build/doDuring.js",
            "line": 8
          },
          {
            "location": "build/doWhilst.js",
            "line": 8
          },
          {
            "location": "build/during.js",
            "line": 8
          },
          {
            "location": "build/eachOf.js",
            "line": 12
          },
          {
            "location": "build/eachOf.js",
            "line": 28
          },
          {
            "location": "build/forever.js",
            "line": 8
          },
          {
            "location": "build/groupByLimit.js",
            "line": 37
          },
          {
            "location": "build/internal/consoleFunc.js",
            "line": 8
          },
          {
            "location": "build/internal/createTester.js",
            "line": 8
          },
          {
            "location": "build/internal/eachOfLimit.js",
            "line": 8
          },
          {
            "location": "build/internal/filter.js",
            "line": 8
          },
          {
            "location": "build/internal/filter.js",
            "line": 12
          },
          {
            "location": "build/internal/filter.js",
            "line": 16
          },
          {
            "location": "build/internal/filter.js",
            "line": 20
          },
          {
            "location": "build/internal/iterator.js",
            "line": 8
          },
          {
            "location": "build/internal/iterator.js",
            "line": 16
          },
          {
            "location": "build/internal/map.js",
            "line": 8
          },
          {
            "location": "build/internal/parallel.js",
            "line": 8
          },
          {
            "location": "build/internal/parallel.js",
            "line": 12
          },
          {
            "location": "build/internal/queue.js",
            "line": 8
          },
          {
            "location": "build/internal/queue.js",
            "line": 12
          },
          {
            "location": "build/internal/queue.js",
            "line": 16
          },
          {
            "location": "build/mapValuesLimit.js",
            "line": 12
          },
          {
            "location": "build/memoize.js",
            "line": 8
          },
          {
            "location": "build/priorityQueue.js",
            "line": 56
          },
          {
            "location": "build/priorityQueue.js",
            "line": 60
          },
          {
            "location": "build/race.js",
            "line": 8
          },
          {
            "location": "build/race.js",
            "line": 12
          },
          {
            "location": "build/reduce.js",
            "line": 12
          },
          {
            "location": "build/reflectAll.js",
            "line": 12
          },
          {
            "location": "build/reflectAll.js",
            "line": 16
          },
          {
            "location": "build/reflectAll.js",
            "line": 20
          },
          {
            "location": "build/retry.js",
            "line": 8
          },
          {
            "location": "build/retry.js",
            "line": 12
          },
          {
            "location": "build/seq.js",
            "line": 8
          },
          {
            "location": "build/seq.js",
            "line": 24
          },
          {
            "location": "build/some.js",
            "line": 15
          },
          {
            "location": "build/someLimit.js",
            "line": 15
          },
          {
            "location": "build/sortBy.js",
            "line": 8
          },
          {
            "location": "build/sortBy.js",
            "line": 12
          },
          {
            "location": "build/timesLimit.js",
            "line": 12
          },
          {
            "location": "build/transform.js",
            "line": 8
          },
          {
            "location": "build/transform.js",
            "line": 12
          },
          {
            "location": "build/tryEach.js",
            "line": 8
          },
          {
            "location": "build/waterfall.js",
            "line": 29
          },
          {
            "location": "build/waterfall.js",
            "line": 33
          },
          {
            "location": "build/whilst.js",
            "line": 8
          },
          {
            "location": "lib/auto.js",
            "line": 1
          },
          {
            "location": "lib/auto.js",
            "line": 2
          },
          {
            "location": "lib/auto.js",
            "line": 3
          },
          {
            "location": "lib/auto.js",
            "line": 4
          },
          {
            "location": "lib/auto.js",
            "line": 5
          },
          {
            "location": "lib/auto.js",
            "line": 6
          },
          {
            "location": "lib/autoInject.js",
            "line": 2
          },
          {
            "location": "lib/autoInject.js",
            "line": 3
          },
          {
            "location": "lib/autoInject.js",
            "line": 4
          },
          {
            "location": "lib/autoInject.js",
            "line": 5
          },
          {
            "location": "lib/concatLimit.js",
            "line": 1
          },
          {
            "location": "lib/detect.js",
            "line": 1
          },
          {
            "location": "lib/detectLimit.js",
            "line": 1
          },
          {
            "location": "lib/doDuring.js",
            "line": 1
          },
          {
            "location": "lib/doWhilst.js",
            "line": 1
          },
          {
            "location": "lib/during.js",
            "line": 1
          },
          {
            "location": "lib/eachOf.js",
            "line": 1
          },
          {
            "location": "lib/eachOf.js",
            "line": 6
          },
          {
            "location": "lib/forever.js",
            "line": 1
          },
          {
            "location": "lib/groupByLimit.js",
            "line": 1
          },
          {
            "location": "lib/internal/consoleFunc.js",
            "line": 1
          },
          {
            "location": "lib/internal/createTester.js",
            "line": 1
          },
          {
            "location": "lib/internal/eachOfLimit.js",
            "line": 1
          },
          {
            "location": "lib/internal/filter.js",
            "line": 1
          },
          {
            "location": "lib/internal/filter.js",
            "line": 2
          },
          {
            "location": "lib/internal/filter.js",
            "line": 3
          },
          {
            "location": "lib/internal/filter.js",
            "line": 4
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 1
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 3
          },
          {
            "location": "lib/internal/map.js",
            "line": 1
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 1
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 2
          },
          {
            "location": "lib/internal/queue.js",
            "line": 1
          },
          {
            "location": "lib/internal/queue.js",
            "line": 2
          },
          {
            "location": "lib/internal/queue.js",
            "line": 3
          },
          {
            "location": "lib/mapValuesLimit.js",
            "line": 3
          },
          {
            "location": "lib/memoize.js",
            "line": 1
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 1
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 2
          },
          {
            "location": "lib/race.js",
            "line": 1
          },
          {
            "location": "lib/race.js",
            "line": 2
          },
          {
            "location": "lib/reduce.js",
            "line": 2
          },
          {
            "location": "lib/reflectAll.js",
            "line": 2
          },
          {
            "location": "lib/reflectAll.js",
            "line": 3
          },
          {
            "location": "lib/reflectAll.js",
            "line": 4
          },
          {
            "location": "lib/retry.js",
            "line": 1
          },
          {
            "location": "lib/retry.js",
            "line": 2
          },
          {
            "location": "lib/seq.js",
            "line": 1
          },
          {
            "location": "lib/seq.js",
            "line": 5
          },
          {
            "location": "lib/some.js",
            "line": 3
          },
          {
            "location": "lib/someLimit.js",
            "line": 3
          },
          {
            "location": "lib/sortBy.js",
            "line": 1
          },
          {
            "location": "lib/sortBy.js",
            "line": 2
          },
          {
            "location": "lib/timesLimit.js",
            "line": 2
          },
          {
            "location": "lib/transform.js",
            "line": 1
          },
          {
            "location": "lib/transform.js",
            "line": 2
          },
          {
            "location": "lib/tryEach.js",
            "line": 1
          },
          {
            "location": "lib/waterfall.js",
            "line": 1
          },
          {
            "location": "lib/waterfall.js",
            "line": 2
          },
          {
            "location": "lib/whilst.js",
            "line": 1
          },
          {
            "location": "mocha_test/auto.js",
            "line": 3
          },
          {
            "location": "mocha_test/detect.js",
            "line": 3
          },
          {
            "location": "mocha_test/eachOf.js",
            "line": 4
          },
          {
            "location": "mocha_test/every.js",
            "line": 3
          },
          {
            "location": "mocha_test/retry.js",
            "line": 4
          },
          {
            "location": "mocha_test/some.js",
            "line": 3
          },
          {
            "location": "perf/benchmark.js",
            "line": 3
          },
          {
            "location": "perf/suites.js",
            "line": 1
          },
          {
            "location": "support/jsdoc/jsdoc-fix-html.js",
            "line": 6
          },
          {
            "location": "lib/auto.js",
            "line": 138
          },
          {
            "location": "lib/auto.js",
            "line": 185
          },
          {
            "location": "lib/auto.js",
            "line": 234
          },
          {
            "location": "lib/internal/consoleFunc.js",
            "line": 16
          },
          {
            "location": "lib/auto.js",
            "line": 121
          },
          {
            "location": "lib/auto.js",
            "line": 202
          },
          {
            "location": "lib/auto.js",
            "line": 250
          },
          {
            "location": "lib/autoInject.js",
            "line": 109
          },
          {
            "location": "lib/reflectAll.js",
            "line": 79
          },
          {
            "location": "lib/auto.js",
            "line": 251
          },
          {
            "location": "lib/internal/queue.js",
            "line": 59
          },
          {
            "location": "lib/auto.js",
            "line": 122
          },
          {
            "location": "lib/autoInject.js",
            "line": 116
          },
          {
            "location": "lib/internal/queue.js",
            "line": 27
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 42
          },
          {
            "location": "lib/race.js",
            "line": 44
          },
          {
            "location": "lib/reflectAll.js",
            "line": 75
          },
          {
            "location": "lib/transform.js",
            "line": 54
          },
          {
            "location": "lib/waterfall.js",
            "line": 68
          },
          {
            "location": "lib/auto.js",
            "line": 99
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 25
          },
          {
            "location": "lib/autoInject.js",
            "line": 137
          },
          {
            "location": "lib/internal/filter.js",
            "line": 42
          },
          {
            "location": "lib/reflectAll.js",
            "line": 76
          },
          {
            "location": "lib/seq.js",
            "line": 46
          },
          {
            "location": "lib/sortBy.js",
            "line": 63
          },
          {
            "location": "lib/autoInject.js",
            "line": 19
          },
          {
            "location": "lib/eachOf.js",
            "line": 77
          },
          {
            "location": "lib/internal/filter.js",
            "line": 50
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 35
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 8
          },
          {
            "location": "lib/internal/filter.js",
            "line": 44
          },
          {
            "location": "lib/retry.js",
            "line": 95
          },
          {
            "location": "lib/retry.js",
            "line": 104
          },
          {
            "location": "lib/timesLimit.js",
            "line": 23
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-es",
      "version": "4.16.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8552faedaa4d1d591de8da9b3980ef1c52efa08"
        }
      ],
      "purl": "pkg:npm/lodash-es@4.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-es@4.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.16.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.17.4 used instead of 4.16.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-cli",
      "version": "6.24.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a05ffd210dca0c288a26d5319c5ac8669a265ad0"
        }
      ],
      "purl": "pkg:npm/babel-cli@6.24.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-cli/-/babel-cli-6.24.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-cli@6.24.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-cli/-/babel-cli-6.24.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.24.1 used instead of 6.24.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-runtime",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a9489f144de70efb3ce4300accdb329e2fc543b"
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-runtime@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.23.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4de911e667b0eae9124e34254b53aea6fc618d3e"
        }
      ],
      "purl": "pkg:npm/core-js@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8"
        }
      ],
      "purl": "pkg:npm/glob@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a4e4090b96b2db06a9d7df01055a62a77c9b774"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c4367a904b51ea62a908ac310bf99ff90a82a3e"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-core",
      "version": "6.24.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f36a0a77f5c155aed6f920b844d23ba56742a02"
        }
      ],
      "purl": "pkg:npm/babel-core@6.24.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-core/-/babel-core-6.24.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-core@6.24.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-core/-/babel-core-6.24.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.25.0 used instead of 6.24.0"
        },
        {
          "name": "ImportedModules",
          "value": "babel-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/build/compile-module.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-code-frame",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "027620bee567a88c32561574e7fd0801d33118e4"
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.22.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-messages",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3cdf4703858035b2a2951c6ec5edf6c62f2630e"
        }
      ],
      "purl": "pkg:npm/babel-messages@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-messages@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.23.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-template",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04d4f270adbb3aa704a8143ae26faa529238e638"
        }
      ],
      "purl": "pkg:npm/babel-template@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-template/-/babel-template-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-template@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-template/-/babel-template-6.23.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-traverse",
      "version": "6.23.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3cb59010ecd06a97d81310065f966b699e14f48"
        }
      ],
      "purl": "pkg:npm/babel-traverse@6.23.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.23.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-traverse@6.23.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.23.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-types",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb17179d7538bad38cd0c9e115d340f77e7e9acf"
        }
      ],
      "purl": "pkg:npm/babel-types@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-types/-/babel-types-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-types@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-types/-/babel-types-6.23.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babylon",
      "version": "6.16.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30c5a22f481978a9e7f8cdfdf496b11d94b404d3"
        }
      ],
      "purl": "pkg:npm/babylon@6.16.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babylon/-/babylon-6.16.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babylon@6.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babylon/-/babylon-6.16.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "9.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63e903658171ec2d9f51b1d31de5e2b8dc01fb80"
        }
      ],
      "purl": "pkg:npm/globals@9.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-9.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@9.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-9.16.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "08e9f132484a2c45a30907e9dc4d5567b7f114d7"
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-add-module-exports",
      "version": "0.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ae9a1f4a8dc67f0cdec4f4aeda1e43a5ff65e25"
        }
      ],
      "purl": "pkg:npm/babel-plugin-add-module-exports@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-add-module-exports/-/babel-plugin-add-module-exports-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-add-module-exports@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-add-module-exports/-/babel-plugin-add-module-exports-0.2.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "babel-plugin-add-module-exports"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/build/compile-module.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-istanbul",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "266b304b9109607d60748474394676982f660df4"
        }
      ],
      "purl": "pkg:npm/babel-plugin-istanbul@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-istanbul@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a3b3d0e98063d43f4c03f2e8ae6cd51a86883a0"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-commonjs",
      "version": "6.7.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df65f39cdd1f5ce442cee63e676467a6e5916e46"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-commonjs/-/babel-plugin-transform-es2015-modules-commonjs-6.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-commonjs/-/babel-plugin-transform-es2015-modules-commonjs-6.7.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.24.1 used instead of 6.7.4"
        },
        {
          "name": "ImportedModules",
          "value": "babel-plugin-transform-es2015-modules-commonjs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/build/compile-module.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-es2015",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "88b33e58fec94c6ebde58dc65ece5d14e0ec2568"
        }
      ],
      "purl": "pkg:npm/babel-preset-es2015@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-es2015/-/babel-preset-es2015-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-es2015@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-es2015/-/babel-preset-es2015-6.6.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.24.1 used instead of 6.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-es2017",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de2f9da5a30c50d293fb54a0ba15d6ddc573f0f2"
        }
      ],
      "purl": "pkg:npm/babel-preset-es2017@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-es2017/-/babel-preset-es2017-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-es2017@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-es2017/-/babel-preset-es2017-6.22.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.24.1 used instead of 6.22.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babelify",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "584249bc5066b61f984b3e745ed855203c9ec73e"
        }
      ],
      "purl": "pkg:npm/babelify@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babelify/-/babelify-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babelify@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babelify/-/babelify-7.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "7.3.0 used instead of 7.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "benchmark",
      "version": "2.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0676d82e560d82d2f317f82cf0858483955a7bfe"
        }
      ],
      "purl": "pkg:npm/benchmark@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/benchmark/-/benchmark-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/benchmark@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/benchmark/-/benchmark-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.4 used instead of 2.1.2"
        },
        {
          "name": "ImportedModules",
          "value": "benchmark"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.4.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da8d821d87813d158967e743d5fe6c62cf8c0f"
        }
      ],
      "purl": "pkg:npm/bluebird@3.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-3.4.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.5.0 used instead of 3.4.6"
        },
        {
          "name": "ImportedModules",
          "value": "bluebird"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "mocha_test/asyncify.js",
            "line": 142
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "3.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d02637b067fe958bdbfdd3a40ec56fef7373247"
        }
      ],
      "purl": "pkg:npm/chai@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai/-/chai-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai/-/chai-3.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chai"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "mocha_test/apply.js",
            "line": 2
          },
          {
            "location": "mocha_test/applyEach.js",
            "line": 2
          },
          {
            "location": "mocha_test/asyncify.js",
            "line": 3
          },
          {
            "location": "mocha_test/auto.js",
            "line": 2
          },
          {
            "location": "mocha_test/autoInject.js",
            "line": 2
          },
          {
            "location": "mocha_test/cargo.js",
            "line": 2
          },
          {
            "location": "mocha_test/compose.js",
            "line": 2
          },
          {
            "location": "mocha_test/concat.js",
            "line": 2
          },
          {
            "location": "mocha_test/consoleFunctions.js",
            "line": 2
          },
          {
            "location": "mocha_test/constant.js",
            "line": 2
          },
          {
            "location": "mocha_test/detect.js",
            "line": 2
          },
          {
            "location": "mocha_test/during.js",
            "line": 2
          },
          {
            "location": "mocha_test/each.js",
            "line": 2
          },
          {
            "location": "mocha_test/eachOf.js",
            "line": 2
          },
          {
            "location": "mocha_test/ensureAsync.js",
            "line": 2
          },
          {
            "location": "mocha_test/es2017/asyncFunctions.js",
            "line": 2
          },
          {
            "location": "mocha_test/every.js",
            "line": 2
          },
          {
            "location": "mocha_test/filter.js",
            "line": 2
          },
          {
            "location": "mocha_test/forever.js",
            "line": 2
          },
          {
            "location": "mocha_test/groupBy.js",
            "line": 2
          },
          {
            "location": "mocha_test/linked_list.js",
            "line": 2
          },
          {
            "location": "mocha_test/map.js",
            "line": 2
          },
          {
            "location": "mocha_test/mapValues.js",
            "line": 2
          },
          {
            "location": "mocha_test/memoize.js",
            "line": 2
          },
          {
            "location": "mocha_test/nextTick.js",
            "line": 2
          },
          {
            "location": "mocha_test/parallel.js",
            "line": 2
          },
          {
            "location": "mocha_test/priorityQueue.js",
            "line": 2
          },
          {
            "location": "mocha_test/queue.js",
            "line": 2
          },
          {
            "location": "mocha_test/reduce.js",
            "line": 2
          },
          {
            "location": "mocha_test/retry.js",
            "line": 2
          },
          {
            "location": "mocha_test/retryable.js",
            "line": 2
          },
          {
            "location": "mocha_test/seq.js",
            "line": 2
          },
          {
            "location": "mocha_test/series.js",
            "line": 2
          },
          {
            "location": "mocha_test/setImmediate.js",
            "line": 2
          },
          {
            "location": "mocha_test/slice.js",
            "line": 2
          },
          {
            "location": "mocha_test/some.js",
            "line": 2
          },
          {
            "location": "mocha_test/sortBy.js",
            "line": 2
          },
          {
            "location": "mocha_test/timeout.js",
            "line": 2
          },
          {
            "location": "mocha_test/times.js",
            "line": 2
          },
          {
            "location": "mocha_test/transform.js",
            "line": 2
          },
          {
            "location": "mocha_test/tryEach.js",
            "line": 2
          },
          {
            "location": "mocha_test/until.js",
            "line": 2
          },
          {
            "location": "mocha_test/waterfall.js",
            "line": 2
          },
          {
            "location": "mocha_test/whilst.js",
            "line": 2
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "cheerio",
      "version": "0.22.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9baa860a3f9b595a6b81b1a86873121ed3a269e"
        }
      ],
      "purl": "pkg:npm/cheerio@0.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio/-/cheerio-0.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio@0.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio/-/cheerio-0.22.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "cheerio"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/jsdoc/jsdoc-fix-html.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coveralls",
      "version": "2.11.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9ff01a1adbf22a129e35a8d62345a52a781b395"
        }
      ],
      "purl": "pkg:npm/coveralls@2.11.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coveralls/-/coveralls-2.11.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coveralls@2.11.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coveralls/-/coveralls-2.11.9.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.13.1 used instead of 2.11.9"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9f31142af468cb72b25b30136ba2456834916be"
        }
      ],
      "purl": "pkg:npm/qs@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-5.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.67.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8af74780e2bf11ea0ae9aa965c11f11afd272742"
        }
      ],
      "purl": "pkg:npm/request@2.67.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.67.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.67.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "2.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96edb9f2fdb01995822b263dd8aadab6748181bc"
        }
      ],
      "purl": "pkg:npm/es6-promise@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promise/-/es6-promise-2.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "es6-promise"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "mocha_test/asyncify.js",
            "line": 150
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint",
      "version": "2.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e4cc8fa0f009fb829aaae23855a29360be1f6c11"
        }
      ],
      "purl": "pkg:npm/eslint@2.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-2.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@2.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-2.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96e3b70d5779f6ad49cd032673d1c312767ba581"
        }
      ],
      "purl": "pkg:npm/esprima@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "9.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "992ce90828c3a55fa8f16fada177adb64664cf9d"
        }
      ],
      "purl": "pkg:npm/globals@9.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-9.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@9.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-9.12.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5fe67d8b205ce4d22fad05b7781e8dadcc4b30"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c70bfd8169bc1dcbf48604e0f04b8b49cde9e9f"
        }
      ],
      "purl": "pkg:npm/user-home@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "0.26.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ae1fdd94897798edab76d0918cf42d0c3184fa9"
        }
      ],
      "purl": "pkg:npm/fs-extra@0.26.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-0.26.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@0.26.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-0.26.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "fs-extra"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/jsdoc/jsdoc-fix-html.js",
            "line": 2
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gh-pages-deploy",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2aed1887f1de9bdc6917b9dc9f3e68c86ac688a6"
        }
      ],
      "purl": "pkg:npm/gh-pages-deploy@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gh-pages-deploy/-/gh-pages-deploy-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gh-pages-deploy@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gh-pages-deploy/-/gh-pages-deploy-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc",
      "version": "3.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "341cdb06e44a113d9541efd212c95a488064e9ee"
        }
      ],
      "purl": "pkg:npm/jsdoc@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc/-/jsdoc-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc/-/jsdoc-3.4.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.4.3 used instead of 3.4.0"
        },
        {
          "name": "ImportedModules",
          "value": "jsdoc/util/doop,jsdoc/fs,jsdoc/util/templateHelper,jsdoc/util/logger,jsdoc/path,jsdoc/template,jsdoc/src/filter,jsdoc/src/scanner"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 4
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 5
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 7
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 8
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 9
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 11
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 526
          },
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 527
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c9edcb11ced4f0dd2f2d40db0d49a109c088aab"
        }
      ],
      "purl": "pkg:npm/async@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.4.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "2.9.34",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f7b4ec80216328a9fddebdf69c8d4942feff7d8"
        }
      ],
      "purl": "pkg:npm/bluebird@2.9.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@2.9.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.34.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.4.7 used instead of 2.9.34"
        },
        {
          "name": "ImportedModules",
          "value": "bluebird"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "mocha_test/asyncify.js",
            "line": 142
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "2.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df691b9310889402aeb29cc066708c56690b854b"
        }
      ],
      "purl": "pkg:npm/espree@2.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.7 used instead of 2.2.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "taffydb",
      "version": "",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c549d2f5712d7d1d109ad6bb1a4084f1b7add4e"
        }
      ],
      "purl": "pkg:npm/taffydb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/hegemonic/taffydb/tarball/7d100bcee0e997ee4977e273cdce60bd8933050e"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/taffydb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://github.com/hegemonic/taffydb/tarball/7d100bcee0e997ee4977e273cdce60bd8933050e"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "taffydb"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/jsdoc/theme/publish.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
        }
      ],
      "purl": "pkg:npm/underscore@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2b94e8f499fadd0069d54f9aef4a4d48ec5cc1f"
        }
      ],
      "purl": "pkg:npm/karma@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma/-/karma-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma/-/karma-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.7.0 used instead of 1.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.10.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
        }
      ],
      "purl": "pkg:npm/lodash@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "lodash/isObject,lodash/_arrayEach,lodash/_baseForOwn,lodash/_baseIndexOf,lodash/isArray,lodash/keys,lodash/noop,lodash/_arrayMap,lodash/trim,lodash/identity,lodash/isArrayLike,lodash/_baseProperty,lodash/constant,lodash/_baseRange,lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/asyncify.js",
            "line": 8
          },
          {
            "location": "lib/asyncify.js",
            "line": 1
          },
          {
            "location": "lib/asyncify.js",
            "line": 70
          },
          {
            "location": "build/auto.js",
            "line": 167
          },
          {
            "location": "build/auto.js",
            "line": 171
          },
          {
            "location": "build/auto.js",
            "line": 175
          },
          {
            "location": "build/auto.js",
            "line": 179
          },
          {
            "location": "build/auto.js",
            "line": 183
          },
          {
            "location": "build/auto.js",
            "line": 187
          },
          {
            "location": "build/autoInject.js",
            "line": 12
          },
          {
            "location": "build/autoInject.js",
            "line": 16
          },
          {
            "location": "build/autoInject.js",
            "line": 20
          },
          {
            "location": "build/autoInject.js",
            "line": 24
          },
          {
            "location": "build/concatLimit.js",
            "line": 27
          },
          {
            "location": "build/detect.js",
            "line": 7
          },
          {
            "location": "build/detectLimit.js",
            "line": 7
          },
          {
            "location": "build/doDuring.js",
            "line": 8
          },
          {
            "location": "build/doWhilst.js",
            "line": 8
          },
          {
            "location": "build/during.js",
            "line": 8
          },
          {
            "location": "build/eachOf.js",
            "line": 12
          },
          {
            "location": "build/eachOf.js",
            "line": 28
          },
          {
            "location": "build/forever.js",
            "line": 8
          },
          {
            "location": "build/groupByLimit.js",
            "line": 37
          },
          {
            "location": "build/internal/consoleFunc.js",
            "line": 8
          },
          {
            "location": "build/internal/createTester.js",
            "line": 8
          },
          {
            "location": "build/internal/eachOfLimit.js",
            "line": 8
          },
          {
            "location": "build/internal/filter.js",
            "line": 8
          },
          {
            "location": "build/internal/filter.js",
            "line": 12
          },
          {
            "location": "build/internal/filter.js",
            "line": 16
          },
          {
            "location": "build/internal/filter.js",
            "line": 20
          },
          {
            "location": "build/internal/iterator.js",
            "line": 8
          },
          {
            "location": "build/internal/iterator.js",
            "line": 16
          },
          {
            "location": "build/internal/map.js",
            "line": 8
          },
          {
            "location": "build/internal/parallel.js",
            "line": 8
          },
          {
            "location": "build/internal/parallel.js",
            "line": 12
          },
          {
            "location": "build/internal/queue.js",
            "line": 8
          },
          {
            "location": "build/internal/queue.js",
            "line": 12
          },
          {
            "location": "build/internal/queue.js",
            "line": 16
          },
          {
            "location": "build/mapValuesLimit.js",
            "line": 12
          },
          {
            "location": "build/memoize.js",
            "line": 8
          },
          {
            "location": "build/priorityQueue.js",
            "line": 56
          },
          {
            "location": "build/priorityQueue.js",
            "line": 60
          },
          {
            "location": "build/race.js",
            "line": 8
          },
          {
            "location": "build/race.js",
            "line": 12
          },
          {
            "location": "build/reduce.js",
            "line": 12
          },
          {
            "location": "build/reflectAll.js",
            "line": 12
          },
          {
            "location": "build/reflectAll.js",
            "line": 16
          },
          {
            "location": "build/reflectAll.js",
            "line": 20
          },
          {
            "location": "build/retry.js",
            "line": 8
          },
          {
            "location": "build/retry.js",
            "line": 12
          },
          {
            "location": "build/seq.js",
            "line": 8
          },
          {
            "location": "build/seq.js",
            "line": 24
          },
          {
            "location": "build/some.js",
            "line": 15
          },
          {
            "location": "build/someLimit.js",
            "line": 15
          },
          {
            "location": "build/sortBy.js",
            "line": 8
          },
          {
            "location": "build/sortBy.js",
            "line": 12
          },
          {
            "location": "build/timesLimit.js",
            "line": 12
          },
          {
            "location": "build/transform.js",
            "line": 8
          },
          {
            "location": "build/transform.js",
            "line": 12
          },
          {
            "location": "build/tryEach.js",
            "line": 8
          },
          {
            "location": "build/waterfall.js",
            "line": 29
          },
          {
            "location": "build/waterfall.js",
            "line": 33
          },
          {
            "location": "build/whilst.js",
            "line": 8
          },
          {
            "location": "lib/auto.js",
            "line": 1
          },
          {
            "location": "lib/auto.js",
            "line": 2
          },
          {
            "location": "lib/auto.js",
            "line": 3
          },
          {
            "location": "lib/auto.js",
            "line": 4
          },
          {
            "location": "lib/auto.js",
            "line": 5
          },
          {
            "location": "lib/auto.js",
            "line": 6
          },
          {
            "location": "lib/autoInject.js",
            "line": 2
          },
          {
            "location": "lib/autoInject.js",
            "line": 3
          },
          {
            "location": "lib/autoInject.js",
            "line": 4
          },
          {
            "location": "lib/autoInject.js",
            "line": 5
          },
          {
            "location": "lib/concatLimit.js",
            "line": 1
          },
          {
            "location": "lib/detect.js",
            "line": 1
          },
          {
            "location": "lib/detectLimit.js",
            "line": 1
          },
          {
            "location": "lib/doDuring.js",
            "line": 1
          },
          {
            "location": "lib/doWhilst.js",
            "line": 1
          },
          {
            "location": "lib/during.js",
            "line": 1
          },
          {
            "location": "lib/eachOf.js",
            "line": 1
          },
          {
            "location": "lib/eachOf.js",
            "line": 6
          },
          {
            "location": "lib/forever.js",
            "line": 1
          },
          {
            "location": "lib/groupByLimit.js",
            "line": 1
          },
          {
            "location": "lib/internal/consoleFunc.js",
            "line": 1
          },
          {
            "location": "lib/internal/createTester.js",
            "line": 1
          },
          {
            "location": "lib/internal/eachOfLimit.js",
            "line": 1
          },
          {
            "location": "lib/internal/filter.js",
            "line": 1
          },
          {
            "location": "lib/internal/filter.js",
            "line": 2
          },
          {
            "location": "lib/internal/filter.js",
            "line": 3
          },
          {
            "location": "lib/internal/filter.js",
            "line": 4
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 1
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 3
          },
          {
            "location": "lib/internal/map.js",
            "line": 1
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 1
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 2
          },
          {
            "location": "lib/internal/queue.js",
            "line": 1
          },
          {
            "location": "lib/internal/queue.js",
            "line": 2
          },
          {
            "location": "lib/internal/queue.js",
            "line": 3
          },
          {
            "location": "lib/mapValuesLimit.js",
            "line": 3
          },
          {
            "location": "lib/memoize.js",
            "line": 1
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 1
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 2
          },
          {
            "location": "lib/race.js",
            "line": 1
          },
          {
            "location": "lib/race.js",
            "line": 2
          },
          {
            "location": "lib/reduce.js",
            "line": 2
          },
          {
            "location": "lib/reflectAll.js",
            "line": 2
          },
          {
            "location": "lib/reflectAll.js",
            "line": 3
          },
          {
            "location": "lib/reflectAll.js",
            "line": 4
          },
          {
            "location": "lib/retry.js",
            "line": 1
          },
          {
            "location": "lib/retry.js",
            "line": 2
          },
          {
            "location": "lib/seq.js",
            "line": 1
          },
          {
            "location": "lib/seq.js",
            "line": 5
          },
          {
            "location": "lib/some.js",
            "line": 3
          },
          {
            "location": "lib/someLimit.js",
            "line": 3
          },
          {
            "location": "lib/sortBy.js",
            "line": 1
          },
          {
            "location": "lib/sortBy.js",
            "line": 2
          },
          {
            "location": "lib/timesLimit.js",
            "line": 2
          },
          {
            "location": "lib/transform.js",
            "line": 1
          },
          {
            "location": "lib/transform.js",
            "line": 2
          },
          {
            "location": "lib/tryEach.js",
            "line": 1
          },
          {
            "location": "lib/waterfall.js",
            "line": 1
          },
          {
            "location": "lib/waterfall.js",
            "line": 2
          },
          {
            "location": "lib/whilst.js",
            "line": 1
          },
          {
            "location": "mocha_test/auto.js",
            "line": 3
          },
          {
            "location": "mocha_test/detect.js",
            "line": 3
          },
          {
            "location": "mocha_test/eachOf.js",
            "line": 4
          },
          {
            "location": "mocha_test/every.js",
            "line": 3
          },
          {
            "location": "mocha_test/retry.js",
            "line": 4
          },
          {
            "location": "mocha_test/some.js",
            "line": 3
          },
          {
            "location": "perf/benchmark.js",
            "line": 3
          },
          {
            "location": "perf/suites.js",
            "line": 1
          },
          {
            "location": "support/jsdoc/jsdoc-fix-html.js",
            "line": 6
          },
          {
            "location": "lib/auto.js",
            "line": 138
          },
          {
            "location": "lib/auto.js",
            "line": 185
          },
          {
            "location": "lib/auto.js",
            "line": 234
          },
          {
            "location": "lib/internal/consoleFunc.js",
            "line": 16
          },
          {
            "location": "lib/auto.js",
            "line": 121
          },
          {
            "location": "lib/auto.js",
            "line": 202
          },
          {
            "location": "lib/auto.js",
            "line": 250
          },
          {
            "location": "lib/autoInject.js",
            "line": 109
          },
          {
            "location": "lib/reflectAll.js",
            "line": 79
          },
          {
            "location": "lib/auto.js",
            "line": 251
          },
          {
            "location": "lib/internal/queue.js",
            "line": 59
          },
          {
            "location": "lib/auto.js",
            "line": 122
          },
          {
            "location": "lib/autoInject.js",
            "line": 116
          },
          {
            "location": "lib/internal/queue.js",
            "line": 27
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 42
          },
          {
            "location": "lib/race.js",
            "line": 44
          },
          {
            "location": "lib/reflectAll.js",
            "line": 75
          },
          {
            "location": "lib/transform.js",
            "line": 54
          },
          {
            "location": "lib/waterfall.js",
            "line": 68
          },
          {
            "location": "lib/auto.js",
            "line": 99
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 25
          },
          {
            "location": "lib/autoInject.js",
            "line": 137
          },
          {
            "location": "lib/internal/filter.js",
            "line": 42
          },
          {
            "location": "lib/reflectAll.js",
            "line": 76
          },
          {
            "location": "lib/seq.js",
            "line": 46
          },
          {
            "location": "lib/sortBy.js",
            "line": 63
          },
          {
            "location": "lib/autoInject.js",
            "line": 19
          },
          {
            "location": "lib/eachOf.js",
            "line": 77
          },
          {
            "location": "lib/internal/filter.js",
            "line": 50
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 35
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 8
          },
          {
            "location": "lib/internal/filter.js",
            "line": 44
          },
          {
            "location": "lib/retry.js",
            "line": 95
          },
          {
            "location": "lib/retry.js",
            "line": 104
          },
          {
            "location": "lib/timesLimit.js",
            "line": 23
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-browserify",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06819daf2c8ddf6c01ba446619c7b342e1eff765"
        }
      ],
      "purl": "pkg:npm/karma-browserify@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-browserify/-/karma-browserify-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-browserify@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-browserify/-/karma-browserify-5.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.1.1 used instead of 5.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-firefox-launcher",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e08af3ce42e39860c2952ea7b7eaa64d63508bdc"
        }
      ],
      "purl": "pkg:npm/karma-firefox-launcher@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-firefox-launcher/-/karma-firefox-launcher-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-firefox-launcher@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-firefox-launcher/-/karma-firefox-launcher-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-mocha",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bca6be2a66805b847417e8d2873fd0b5b27ee7cd"
        }
      ],
      "purl": "pkg:npm/karma-mocha@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-mocha/-/karma-mocha-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-mocha@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-mocha/-/karma-mocha-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.0 used instead of 1.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "karma-mocha-reporter",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20367b93f6651cd2c0d06b10d4eea3b81181fb4e"
        }
      ],
      "purl": "pkg:npm/karma-mocha-reporter@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-mocha-reporter/-/karma-mocha-reporter-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-mocha-reporter@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-mocha-reporter/-/karma-mocha-reporter-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.3 used instead of 2.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "mocha",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "51f93b432bf7e1b175ffc22883ccd0be32dba6b5"
        }
      ],
      "purl": "pkg:npm/mocha@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-3.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.4.2 used instead of 3.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b4202a69099bbb4d292a7c1b95b6682b67ebdc95"
        }
      ],
      "purl": "pkg:npm/glob@7.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.0.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "7.1.1 used instead of 7.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        }
      ],
      "purl": "pkg:npm/json3@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5"
        }
      ],
      "purl": "pkg:npm/supports-color@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-promise-only",
      "version": "0.8.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20a318c30cb45f71fe7adfbf7b21c99c1472ef11"
        }
      ],
      "purl": "pkg:npm/native-promise-only@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-promise-only/-/native-promise-only-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-promise-only@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-promise-only/-/native-promise-only-0.8.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "native-promise-only"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "mocha_test/asyncify.js",
            "line": 137
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "nyc",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1809941e399f2ccfe5e088cd8fc479d1372898b0"
        }
      ],
      "purl": "pkg:npm/nyc@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nyc/-/nyc-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nyc@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nyc/-/nyc-7.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "7.1.0 used instead of 7.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "align-text",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cd90a561093f35d0a99256c22b7069433fad117"
        }
      ],
      "purl": "pkg:npm/align-text@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/align-text@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd17474700cb5cc9c2b709f0be9d23ce3c198c33"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c5061b6e0ef8a81775e50f5d66151bf6bf371107"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "append-transform",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d76ebf8ca94d276e247a36bad44a4b74ab611991"
        }
      ],
      "purl": "pkg:npm/append-transform@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/append-transform/-/append-transform-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/append-transform@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/append-transform/-/append-transform-0.4.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.0 used instead of 0.4.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf"
        }
      ],
      "purl": "pkg:npm/arr-diff@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5ffe54d45e19f32f216e91eb99c8ce892bb604b"
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53"
        }
      ],
      "purl": "pkg:npm/array-unique@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "898508da2226f380df904728456849c1501a4b0d"
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
        }
      ],
      "purl": "pkg:npm/async@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-code-frame",
      "version": "6.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9072dd2353fb0f85b6b57d2c97f0d134d188aed8"
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.11.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-generator",
      "version": "6.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c5a6e3803aacc6c6da7d96cd75da6cc6e2b3275"
        }
      ],
      "purl": "pkg:npm/babel-generator@6.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-generator/-/babel-generator-6.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-generator@6.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-generator/-/babel-generator-6.11.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.11.4 used instead of 6.11.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-messages",
      "version": "6.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf504736ca967e6d65ef0adb5a2a5f947c8e0eb9"
        }
      ],
      "purl": "pkg:npm/babel-messages@6.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-messages@6.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.8.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-runtime",
      "version": "6.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d7fe391bc2cc29b8087c1d9b39878912e9fcfd59"
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-runtime@6.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.9.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-template",
      "version": "6.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97090fcf6bc15685b4f05be65c0a9438aa7e23e3"
        }
      ],
      "purl": "pkg:npm/babel-template@6.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-template/-/babel-template-6.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-template@6.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-template/-/babel-template-6.9.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-traverse",
      "version": "6.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbcf41ff1f32eb614859cead4871160f1f120d78"
        }
      ],
      "purl": "pkg:npm/babel-traverse@6.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-traverse@6.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.10.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.11.4 used instead of 6.10.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-types",
      "version": "6.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3df355bab90ddcf66318640717cf2c154e6648a"
        }
      ],
      "purl": "pkg:npm/babel-types@6.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-types/-/babel-types-6.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-types@6.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-types/-/babel-types-6.11.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babylon",
      "version": "6.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097306b8dabae95159225cf29b3ea55912053180"
        }
      ],
      "purl": "pkg:npm/babylon@6.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babylon/-/babylon-6.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babylon@6.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babylon/-/babylon-6.8.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19053e2e0748eadb379da6c09d455cf5e1039335"
        }
      ],
      "purl": "pkg:npm/balanced-match@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.2 used instead of 0.4.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5b4ad574e2cb7ccc1eb83e6fe79b8ecadf7a526"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.6 used instead of 1.1.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "1.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba77962e12dff969d6b76711e914b737857bf6a7"
        }
      ],
      "purl": "pkg:npm/braces@1.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@1.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caching-transform",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6dbdb2f20f8d8fbce79f3e94e9d1742dcdf5c0a1"
        }
      ],
      "purl": "pkg:npm/caching-transform@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caching-transform/-/caching-transform-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caching-transform@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caching-transform/-/caching-transform-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "center-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa0d32629b6ee972200411cbd4461c907bc2b7ad"
        }
      ],
      "purl": "pkg:npm/center-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/center-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b475760ff80264c762c3a1719032e91c7fea0d1"
        }
      ],
      "purl": "pkg:npm/cliui@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f69b192d3f7d91e382e4b71bddb77878619ab0c6"
        }
      ],
      "purl": "pkg:npm/code-point-at@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddd800da0c66127393cca5950ea968a3aaf1253b"
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44c08c2506f10fb3ca6fd888d5a3444cf8d6a669"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.0 used instead of 1.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df408ab46d01aff91c01c3e7971935d422c54f81"
        }
      ],
      "purl": "pkg:npm/core-js@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.4.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.1 used instead of 2.4.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8254774ab4786b8c5b3cf4dfba66ce563932c252"
        }
      ],
      "purl": "pkg:npm/cross-spawn@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-4.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f87057e995b1a1f6ae6a4960664137bc56f039da"
        }
      ],
      "purl": "pkg:npm/debug@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-require-extensions",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f37ea15d3e13ffd9b437d33e1a75b5fb97874cb8"
        }
      ],
      "purl": "pkg:npm/default-require-extensions@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-require-extensions@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-indent",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9dc5e5ddbceef8325764b9451b02bc6d54084f75"
        }
      ],
      "purl": "pkg:npm/detect-indent@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-indent/-/detect-indent-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-indent@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-indent/-/detect-indent-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e67b43f3e82c96ea3a584ffee0b9fc3325d802d9"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df07284e342a807cd733ac5af72411e581d1177b"
        }
      ],
      "purl": "pkg:npm/expand-brackets@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-range",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a299effd335fe2721ebae8e257ec79644fc85337"
        }
      ],
      "purl": "pkg:npm/expand-range@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-range@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1"
        }
      ],
      "purl": "pkg:npm/extglob@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "996e3e80479b98b9897f15a8a58b3d084e926775"
        }
      ],
      "purl": "pkg:npm/filename-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50b77dfd7e469bc7492470963699fe7a8485a723"
        }
      ],
      "purl": "pkg:npm/fill-range@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8defae57c8a52a8a784f9e31c57c742e993a0b9"
        }
      ],
      "purl": "pkg:npm/find-cache-dir@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "007374e2b6d5c67420a1479bdb75a04872b738c4"
        }
      ],
      "purl": "pkg:npm/for-in@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0149b41a39088c7515f51ebe1c1386d45f935072"
        }
      ],
      "purl": "pkg:npm/for-own@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreground-child",
      "version": "1.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "94dd6aba671389867de8e57e99f1c2ecfb15c01a"
        }
      ],
      "purl": "pkg:npm/foreground-child@1.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@1.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.5.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-base",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4"
        }
      ],
      "purl": "pkg:npm/glob-base@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-base@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81383d72db054fcccf5336daa902f182f6edbb28"
        }
      ],
      "purl": "pkg:npm/glob-parent@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "8.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "93d4a62bdcac38cfafafc47d6b034768cb0ffcb4"
        }
      ],
      "purl": "pkg:npm/globals@8.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-8.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@8.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-8.18.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef089d2880f033b011823ce5c8fae798da775dbd"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "4.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "92c6ed6bb164110c50d4d8d0fbddc70806c6f8e7"
        }
      ],
      "purl": "pkg:npm/handlebars@4.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa"
        }
      ],
      "purl": "pkg:npm/has-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ba81d90da2e25ab34a332e6ec77936e1598118b"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.1.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "db3204cd5a9de2e6cd890b85c6e2f66bcf4f620a"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17d08d326b4423e568eff719f91b0b1cbdf69f1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invariant",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b097010547668c7e337028ebe816ebe36c8a8d54"
        }
      ],
      "purl": "pkg:npm/invariant@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invariant/-/invariant-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invariant@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invariant/-/invariant-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
        }
      ],
      "purl": "pkg:npm/invert-kv@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "db897fc3f7aca2d50de94b6c8c2896a4771627af"
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-builtin-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
        }
      ],
      "purl": "pkg:npm/is-builtin-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-builtin-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-dotfile",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c132383f39199f8edc268ca01b9b007d205cc4d"
        }
      ],
      "purl": "pkg:npm/is-dotfile@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-dotfile@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-equal-shallow",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534"
        }
      ],
      "purl": "pkg:npm/is-equal-shallow@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-equal-shallow@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac468177c4943405a092fc8f29760c6ffc6206c0"
        }
      ],
      "purl": "pkg:npm/is-extglob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6438603eaebe2793948ff4a4262ec8db3d62597b"
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863"
        }
      ],
      "purl": "pkg:npm/is-glob@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01fcbbb393463a548f2f466cce16dece49db908f"
        }
      ],
      "purl": "pkg:npm/is-number@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-posix-bracket",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4"
        }
      ],
      "purl": "pkg:npm/is-posix-bracket@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-posix-bracket@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-primitive",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "207bab91638499c07b2adf240a41a87210034575"
        }
      ],
      "purl": "pkg:npm/is-primitive@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-primitive@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "36f3e22e60750920f5e7241a476a8c6a42275ad0"
        }
      ],
      "purl": "pkg:npm/isexe@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "1.0.0-alpha.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "626f7fd9cf809b6e3bf7ed42a809f8e0b64ae976"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@1.0.0-alpha.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-1.0.0-alpha.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@1.0.0-alpha.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-1.0.0-alpha.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "1.1.0-alpha.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce7cdc6d3ae35fd4baf10a25c06b461eecf1a815"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@1.1.0-alpha.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-1.1.0-alpha.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@1.1.0-alpha.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-1.1.0-alpha.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.0-alpha.4 used instead of 1.1.0-alpha.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "1.0.0-alpha.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32d5f6ec7f33ca3a602209e278b2e6ff143498af"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@1.0.0-alpha.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-1.0.0-alpha.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@1.0.0-alpha.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-1.0.0-alpha.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "1.0.0-alpha.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b15a5c8b59d1b9101be2cb7dd54c703d86adef1"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@1.0.0-alpha.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-1.0.0-alpha.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@1.0.0-alpha.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-1.0.0-alpha.10.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "1.0.0-alpha.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ca30bf44a4866681b6282516a08a08b291ea6c3"
        }
      ],
      "purl": "pkg:npm/istanbul-reports@1.0.0-alpha.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-1.0.0-alpha.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@1.0.0-alpha.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-1.0.0-alpha.7.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.0-alpha.8 used instead of 1.0.0-alpha.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79903f5563ee778cc1162e6dcf1a0027c97f9cb5"
        }
      ],
      "purl": "pkg:npm/js-tokens@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c61608747d815b0362556db3276362a7a38aded3"
        }
      ],
      "purl": "pkg:npm/kind-of@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.0.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-cache",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d78fc3a50474cb80845d3b3b6e1da49a446e8e"
        }
      ],
      "purl": "pkg:npm/lazy-cache@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-cache@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
        }
      ],
      "purl": "pkg:npm/lcid@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.13.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83e4b10913f48496d4d16fec4a560af2ee744b68"
        }
      ],
      "purl": "pkg:npm/lodash@4.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.13.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "lodash/isObject,lodash/_arrayEach,lodash/_baseForOwn,lodash/_baseIndexOf,lodash/isArray,lodash/keys,lodash/noop,lodash/_arrayMap,lodash/trim,lodash/identity,lodash/isArrayLike,lodash/_baseProperty,lodash/constant,lodash/_baseRange,lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/asyncify.js",
            "line": 8
          },
          {
            "location": "lib/asyncify.js",
            "line": 1
          },
          {
            "location": "lib/asyncify.js",
            "line": 70
          },
          {
            "location": "build/auto.js",
            "line": 167
          },
          {
            "location": "build/auto.js",
            "line": 171
          },
          {
            "location": "build/auto.js",
            "line": 175
          },
          {
            "location": "build/auto.js",
            "line": 179
          },
          {
            "location": "build/auto.js",
            "line": 183
          },
          {
            "location": "build/auto.js",
            "line": 187
          },
          {
            "location": "build/autoInject.js",
            "line": 12
          },
          {
            "location": "build/autoInject.js",
            "line": 16
          },
          {
            "location": "build/autoInject.js",
            "line": 20
          },
          {
            "location": "build/autoInject.js",
            "line": 24
          },
          {
            "location": "build/concatLimit.js",
            "line": 27
          },
          {
            "location": "build/detect.js",
            "line": 7
          },
          {
            "location": "build/detectLimit.js",
            "line": 7
          },
          {
            "location": "build/doDuring.js",
            "line": 8
          },
          {
            "location": "build/doWhilst.js",
            "line": 8
          },
          {
            "location": "build/during.js",
            "line": 8
          },
          {
            "location": "build/eachOf.js",
            "line": 12
          },
          {
            "location": "build/eachOf.js",
            "line": 28
          },
          {
            "location": "build/forever.js",
            "line": 8
          },
          {
            "location": "build/groupByLimit.js",
            "line": 37
          },
          {
            "location": "build/internal/consoleFunc.js",
            "line": 8
          },
          {
            "location": "build/internal/createTester.js",
            "line": 8
          },
          {
            "location": "build/internal/eachOfLimit.js",
            "line": 8
          },
          {
            "location": "build/internal/filter.js",
            "line": 8
          },
          {
            "location": "build/internal/filter.js",
            "line": 12
          },
          {
            "location": "build/internal/filter.js",
            "line": 16
          },
          {
            "location": "build/internal/filter.js",
            "line": 20
          },
          {
            "location": "build/internal/iterator.js",
            "line": 8
          },
          {
            "location": "build/internal/iterator.js",
            "line": 16
          },
          {
            "location": "build/internal/map.js",
            "line": 8
          },
          {
            "location": "build/internal/parallel.js",
            "line": 8
          },
          {
            "location": "build/internal/parallel.js",
            "line": 12
          },
          {
            "location": "build/internal/queue.js",
            "line": 8
          },
          {
            "location": "build/internal/queue.js",
            "line": 12
          },
          {
            "location": "build/internal/queue.js",
            "line": 16
          },
          {
            "location": "build/mapValuesLimit.js",
            "line": 12
          },
          {
            "location": "build/memoize.js",
            "line": 8
          },
          {
            "location": "build/priorityQueue.js",
            "line": 56
          },
          {
            "location": "build/priorityQueue.js",
            "line": 60
          },
          {
            "location": "build/race.js",
            "line": 8
          },
          {
            "location": "build/race.js",
            "line": 12
          },
          {
            "location": "build/reduce.js",
            "line": 12
          },
          {
            "location": "build/reflectAll.js",
            "line": 12
          },
          {
            "location": "build/reflectAll.js",
            "line": 16
          },
          {
            "location": "build/reflectAll.js",
            "line": 20
          },
          {
            "location": "build/retry.js",
            "line": 8
          },
          {
            "location": "build/retry.js",
            "line": 12
          },
          {
            "location": "build/seq.js",
            "line": 8
          },
          {
            "location": "build/seq.js",
            "line": 24
          },
          {
            "location": "build/some.js",
            "line": 15
          },
          {
            "location": "build/someLimit.js",
            "line": 15
          },
          {
            "location": "build/sortBy.js",
            "line": 8
          },
          {
            "location": "build/sortBy.js",
            "line": 12
          },
          {
            "location": "build/timesLimit.js",
            "line": 12
          },
          {
            "location": "build/transform.js",
            "line": 8
          },
          {
            "location": "build/transform.js",
            "line": 12
          },
          {
            "location": "build/tryEach.js",
            "line": 8
          },
          {
            "location": "build/waterfall.js",
            "line": 29
          },
          {
            "location": "build/waterfall.js",
            "line": 33
          },
          {
            "location": "build/whilst.js",
            "line": 8
          },
          {
            "location": "lib/auto.js",
            "line": 1
          },
          {
            "location": "lib/auto.js",
            "line": 2
          },
          {
            "location": "lib/auto.js",
            "line": 3
          },
          {
            "location": "lib/auto.js",
            "line": 4
          },
          {
            "location": "lib/auto.js",
            "line": 5
          },
          {
            "location": "lib/auto.js",
            "line": 6
          },
          {
            "location": "lib/autoInject.js",
            "line": 2
          },
          {
            "location": "lib/autoInject.js",
            "line": 3
          },
          {
            "location": "lib/autoInject.js",
            "line": 4
          },
          {
            "location": "lib/autoInject.js",
            "line": 5
          },
          {
            "location": "lib/concatLimit.js",
            "line": 1
          },
          {
            "location": "lib/detect.js",
            "line": 1
          },
          {
            "location": "lib/detectLimit.js",
            "line": 1
          },
          {
            "location": "lib/doDuring.js",
            "line": 1
          },
          {
            "location": "lib/doWhilst.js",
            "line": 1
          },
          {
            "location": "lib/during.js",
            "line": 1
          },
          {
            "location": "lib/eachOf.js",
            "line": 1
          },
          {
            "location": "lib/eachOf.js",
            "line": 6
          },
          {
            "location": "lib/forever.js",
            "line": 1
          },
          {
            "location": "lib/groupByLimit.js",
            "line": 1
          },
          {
            "location": "lib/internal/consoleFunc.js",
            "line": 1
          },
          {
            "location": "lib/internal/createTester.js",
            "line": 1
          },
          {
            "location": "lib/internal/eachOfLimit.js",
            "line": 1
          },
          {
            "location": "lib/internal/filter.js",
            "line": 1
          },
          {
            "location": "lib/internal/filter.js",
            "line": 2
          },
          {
            "location": "lib/internal/filter.js",
            "line": 3
          },
          {
            "location": "lib/internal/filter.js",
            "line": 4
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 1
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 3
          },
          {
            "location": "lib/internal/map.js",
            "line": 1
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 1
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 2
          },
          {
            "location": "lib/internal/queue.js",
            "line": 1
          },
          {
            "location": "lib/internal/queue.js",
            "line": 2
          },
          {
            "location": "lib/internal/queue.js",
            "line": 3
          },
          {
            "location": "lib/mapValuesLimit.js",
            "line": 3
          },
          {
            "location": "lib/memoize.js",
            "line": 1
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 1
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 2
          },
          {
            "location": "lib/race.js",
            "line": 1
          },
          {
            "location": "lib/race.js",
            "line": 2
          },
          {
            "location": "lib/reduce.js",
            "line": 2
          },
          {
            "location": "lib/reflectAll.js",
            "line": 2
          },
          {
            "location": "lib/reflectAll.js",
            "line": 3
          },
          {
            "location": "lib/reflectAll.js",
            "line": 4
          },
          {
            "location": "lib/retry.js",
            "line": 1
          },
          {
            "location": "lib/retry.js",
            "line": 2
          },
          {
            "location": "lib/seq.js",
            "line": 1
          },
          {
            "location": "lib/seq.js",
            "line": 5
          },
          {
            "location": "lib/some.js",
            "line": 3
          },
          {
            "location": "lib/someLimit.js",
            "line": 3
          },
          {
            "location": "lib/sortBy.js",
            "line": 1
          },
          {
            "location": "lib/sortBy.js",
            "line": 2
          },
          {
            "location": "lib/timesLimit.js",
            "line": 2
          },
          {
            "location": "lib/transform.js",
            "line": 1
          },
          {
            "location": "lib/transform.js",
            "line": 2
          },
          {
            "location": "lib/tryEach.js",
            "line": 1
          },
          {
            "location": "lib/waterfall.js",
            "line": 1
          },
          {
            "location": "lib/waterfall.js",
            "line": 2
          },
          {
            "location": "lib/whilst.js",
            "line": 1
          },
          {
            "location": "mocha_test/auto.js",
            "line": 3
          },
          {
            "location": "mocha_test/detect.js",
            "line": 3
          },
          {
            "location": "mocha_test/eachOf.js",
            "line": 4
          },
          {
            "location": "mocha_test/every.js",
            "line": 3
          },
          {
            "location": "mocha_test/retry.js",
            "line": 4
          },
          {
            "location": "mocha_test/some.js",
            "line": 3
          },
          {
            "location": "perf/benchmark.js",
            "line": 3
          },
          {
            "location": "perf/suites.js",
            "line": 1
          },
          {
            "location": "support/jsdoc/jsdoc-fix-html.js",
            "line": 6
          },
          {
            "location": "lib/auto.js",
            "line": 138
          },
          {
            "location": "lib/auto.js",
            "line": 185
          },
          {
            "location": "lib/auto.js",
            "line": 234
          },
          {
            "location": "lib/internal/consoleFunc.js",
            "line": 16
          },
          {
            "location": "lib/auto.js",
            "line": 121
          },
          {
            "location": "lib/auto.js",
            "line": 202
          },
          {
            "location": "lib/auto.js",
            "line": 250
          },
          {
            "location": "lib/autoInject.js",
            "line": 109
          },
          {
            "location": "lib/reflectAll.js",
            "line": 79
          },
          {
            "location": "lib/auto.js",
            "line": 251
          },
          {
            "location": "lib/internal/queue.js",
            "line": 59
          },
          {
            "location": "lib/auto.js",
            "line": 122
          },
          {
            "location": "lib/autoInject.js",
            "line": 116
          },
          {
            "location": "lib/internal/queue.js",
            "line": 27
          },
          {
            "location": "lib/priorityQueue.js",
            "line": 42
          },
          {
            "location": "lib/race.js",
            "line": 44
          },
          {
            "location": "lib/reflectAll.js",
            "line": 75
          },
          {
            "location": "lib/transform.js",
            "line": 54
          },
          {
            "location": "lib/waterfall.js",
            "line": 68
          },
          {
            "location": "lib/auto.js",
            "line": 99
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 25
          },
          {
            "location": "lib/autoInject.js",
            "line": 137
          },
          {
            "location": "lib/internal/filter.js",
            "line": 42
          },
          {
            "location": "lib/reflectAll.js",
            "line": 76
          },
          {
            "location": "lib/seq.js",
            "line": 46
          },
          {
            "location": "lib/sortBy.js",
            "line": 63
          },
          {
            "location": "lib/autoInject.js",
            "line": 19
          },
          {
            "location": "lib/eachOf.js",
            "line": 77
          },
          {
            "location": "lib/internal/filter.js",
            "line": 50
          },
          {
            "location": "lib/internal/iterator.js",
            "line": 35
          },
          {
            "location": "lib/internal/parallel.js",
            "line": 8
          },
          {
            "location": "lib/internal/filter.js",
            "line": 44
          },
          {
            "location": "lib/retry.js",
            "line": 95
          },
          {
            "location": "lib/retry.js",
            "line": 104
          },
          {
            "location": "lib/timesLimit.js",
            "line": 23
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.assign",
      "version": "4.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a0731d93590ddd9ba4589fad65aaf6ee09217e3"
        }
      ],
      "purl": "pkg:npm/lodash.assign@4.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.assign/-/lodash.assign-4.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.assign@4.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.assign/-/lodash.assign-4.0.9.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30e1b3bd98e54d6a0611991812685b6bc47cb63b"
        }
      ],
      "purl": "pkg:npm/lodash.keys@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-4.0.7.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.rest",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c1c32c40028087250fabf70d42e0151548f48c5"
        }
      ],
      "purl": "pkg:npm/lodash.rest@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.rest/-/lodash.rest-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.rest@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.rest/-/lodash.rest-4.0.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "longest",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097"
        }
      ],
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/longest@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "69a65aad3de542cf4ee0f4fe74e8e33c709ccb0f"
        }
      ],
      "purl": "pkg:npm/loose-envify@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14e56eb68c8f1a92c43d59f5014ec29dc20f2ae1"
        }
      ],
      "purl": "pkg:npm/js-tokens@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1343955edaf2e37d9b9e7ee7241e27c4b9fb72be"
        }
      ],
      "purl": "pkg:npm/lru-cache@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "md5-hex",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2c4afe983c4370662179b8cad145219135046c4"
        }
      ],
      "purl": "pkg:npm/md5-hex@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/md5-hex/-/md5-hex-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/md5-hex@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/md5-hex/-/md5-hex-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "md5-o-matic",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "822bccd65e117c514fab176b25945d54100a03c3"
        }
      ],
      "purl": "pkg:npm/md5-o-matic@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/md5-o-matic/-/md5-o-matic-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/md5-o-matic@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/md5-o-matic/-/md5-o-matic-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "2.3.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f4fb3175beec62795a7b8c24d5f745c3680660ab"
        }
      ],
      "purl": "pkg:npm/micromatch@2.3.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@2.3.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.10.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.11 used instead of 2.3.10"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f398a7300ea441e9c348c83d98ab8c9dbf9c40a"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "mkdirp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9cd13c03adbff25b65effde7ce864ee952017098"
        }
      ],
      "purl": "pkg:npm/ms@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d924f142960e1777e7ffe170543631cc7cb02df"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.3.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47886ac1662760d4261b7d979d241709d3ce3f7a"
        }
      ],
      "purl": "pkg:npm/normalize-path@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c020f529c5282adfdd233d91d4b181c3d686dc4b"
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.omit",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "868597333d54e60662940bb458605dd6ae12fe94"
        }
      ],
      "purl": "pkg:npm/object.omit@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.omit@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2e261557ce4c314ec8304f3fa82663e4297ca20"
        }
      ],
      "purl": "pkg:npm/once@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-homedir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d62bdf44b916fd3bbdcf2cab191948fb094f007"
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
        }
      ],
      "purl": "pkg:npm/os-locale@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-glob",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c"
        }
      ],
      "purl": "pkg:npm/parse-glob@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-glob@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "263dada66ab3f2fb10bf7f9d24dd8f3e570ef912"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-conf",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "378e56d6fd13e88bfb6f4a25df7a83faabddba5b"
        }
      ],
      "purl": "pkg:npm/pkg-conf@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-conf/-/pkg-conf-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-conf@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-conf/-/pkg-conf-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a4b508a8d5bb2d629d447056ff4e9c9314cf3d4"
        }
      ],
      "purl": "pkg:npm/pkg-dir@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-up",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e08fb461525c4421624a33b9f7e6d0af5b05a26"
        }
      ],
      "purl": "pkg:npm/pkg-up@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-up/-/pkg-up-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-up@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-up/-/pkg-up-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "preserve",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b"
        }
      ],
      "purl": "pkg:npm/preserve@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/preserve@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randomatic",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e9ef5f2d573c67bd2b8124ae90b5156e457840b"
        }
      ],
      "purl": "pkg:npm/randomatic@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomatic@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "403d6d40a4bdff9c330dd9392dcbb2d9a8bba1fc"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.9.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-cache",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b1a6c35d4d0dfcef5711ae651e8e9d3d7114145"
        }
      ],
      "purl": "pkg:npm/regex-cache@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-cache@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a"
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64ec0c91e0f4b475f90d5b643651e3e6e5b6c2d5"
        }
      ],
      "purl": "pkg:npm/repeat-string@1.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.5.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d4114218877537494f97f77f9785fab810fa4ac"
        }
      ],
      "purl": "pkg:npm/repeating@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeating/-/repeating-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeating@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeating/-/repeating-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9480ab20e94ffa1d9e80a804c7ea147611966b57"
        }
      ],
      "purl": "pkg:npm/resolve-from@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "right-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61339b722fe6a3515689210d24e14c96148613ef"
        }
      ],
      "purl": "pkg:npm/right-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/right-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5efdda4aa2f03417f6b2a574aec29f4b652705"
        }
      ],
      "purl": "pkg:npm/rimraf@2.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.5.4 used instead of 2.5.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "281995b80c1448209415ddbc4cf50c269cef55c5"
        }
      ],
      "purl": "pkg:npm/semver@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.3.0 used instead of 5.2.0"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd5e5d938048df1ac92dfe92e1f16add656f5ec5"
        }
      ],
      "purl": "pkg:npm/set-blocking@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0543b65d7b4fbc60b6cd94593d9bf436739be8"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slide",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "56eb027d65b4d2dce6cb2e2d32c4d4afc9e1d707"
        }
      ],
      "purl": "pkg:npm/slide@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slide@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75ce38f52bf0733c5a7f0c118d81334a2bb5f412"
        }
      ],
      "purl": "pkg:npm/source-map@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spawn-wrap",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df7d3447fb4a019619a41f68ee642a718e6062e9"
        }
      ],
      "purl": "pkg:npm/spawn-wrap@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-wrap@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-1.2.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.4 used instead of 1.2.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "375879b1f92ebc3b334480d038dc546a6d558564"
        }
      ],
      "purl": "pkg:npm/signal-exit@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
        }
      ],
      "purl": "pkg:npm/spdx-correct@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "220b84239119ae9045a892db81a83f4ce16f80fd"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.5 used instead of 1.0.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d52b14b5e9670771440af225bcb563122ac452f6"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d07ea17a4d2fd9351f9d94e2ff9cec74180fe8f3"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c92129b6f1d7f52acf9af424a26e3864a05ceb0a"
        }
      ],
      "purl": "pkg:npm/string-width@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "535d045ce6b6363fa40117084629995e9df324c7"
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "symbol",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b9873b8a901e47c6efe21526a3ac372ef28bbc7"
        }
      ],
      "purl": "pkg:npm/symbol@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/symbol/-/symbol-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/symbol/-/symbol-0.2.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ddd718927b12fd02f270a0aa939ceb6eea4151"
        }
      ],
      "purl": "pkg:npm/test-exclude@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-exclude/-/test-exclude-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-fast-properties",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3f5c0c3ba7299a7ef99427e44633257ade43320"
        }
      ],
      "purl": "pkg:npm/to-fast-properties@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f021e38ba2ca740860f5bd5c695c2a817345f0ec"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6bbe0b0674b9d719708ca38de8c237cb526c3d1"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.10.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
        }
      ],
      "purl": "pkg:npm/yargs@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 14
          },
          {
            "location": "support/build/compile-module.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e0924d6bda6b5afe349e39a6d632850a0f882b7"
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91cd9bd0751322411b659b40f054b21de957ab2d"
        }
      ],
      "purl": "pkg:npm/which@1.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.2.10.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d30f8f873f9a5bbc3a64dabc8d177e071ae426f"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b1f52dc2e8dc0e3cb04d187a25f758a38a90ca3b"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-1.1.4.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
        }
      ],
      "purl": "pkg:npm/y18n@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "306c543835f09ee1a4cb23b7bce9ab341c91cdd4"
        }
      ],
      "purl": "pkg:npm/yallist@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "4.7.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e60432658a3387ff269c028eacde4a512e438dff"
        }
      ],
      "purl": "pkg:npm/yargs@4.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-4.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-4.7.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.8.1 used instead of 4.7.1"
        },
        {
          "name": "ImportedModules",
          "value": "yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 14
          },
          {
            "location": "support/build/compile-module.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
        }
      ],
      "purl": "pkg:npm/camelcase@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "120601537a916d29940f934da3b48d585a39213d"
        }
      ],
      "purl": "pkg:npm/cliui@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b4315bb4214a3d7058ebeee892e13fa24d98b075"
        }
      ],
      "purl": "pkg:npm/window-size@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f367dc9c6cfa5660b6971230f3b277fc5e3adca"
        }
      ],
      "purl": "pkg:npm/yargs-parser@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-2.4.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.1 used instead of 2.4.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.0 used instead of 2.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recursive-readdir",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6e66c9ae473f4928f8e6c67a05d80e7a56528ef"
        }
      ],
      "purl": "pkg:npm/recursive-readdir@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/recursive-readdir/-/recursive-readdir-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/recursive-readdir@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/recursive-readdir/-/recursive-readdir-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d4524e8b955f95d4f5b58851ce21dd72fb4e952"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "275d8edaac4f1bb3326472089e7949c8394699dd"
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62ba947fa4c0b4363839aefecd4f0fbad6059726"
        }
      ],
      "purl": "pkg:npm/rimraf@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.5.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.6.1 used instead of 2.5.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0aa235931a4a96ac13d60ffac2fb877bd6ed4f58"
        }
      ],
      "purl": "pkg:npm/glob@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.0.3.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "0.36.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c89ac479828924ff8f69c1d44541cb4ea2fc11fc"
        }
      ],
      "purl": "pkg:npm/rollup@0.36.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup/-/rollup-0.36.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup@0.36.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup/-/rollup-0.36.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.36.4 used instead of 0.36.3"
        },
        {
          "name": "ImportedModules",
          "value": "rollup"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/build/aggregate-bundle.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32552aa64b458392a85eab3b0b5ee61527167aeb"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.6.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup-plugin-node-resolve",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "07e0ae94ac002a3ea36e8f33ca121d9f836b1309"
        }
      ],
      "purl": "pkg:npm/rollup-plugin-node-resolve@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup-plugin-node-resolve/-/rollup-plugin-node-resolve-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup-plugin-node-resolve@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup-plugin-node-resolve/-/rollup-plugin-node-resolve-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.1 used instead of 2.0.0"
        },
        {
          "name": "ImportedModules",
          "value": "rollup-plugin-node-resolve"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "support/build/aggregate-bundle.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup-plugin-npm",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a28ffdb5160bc8e1e371de39ed71faf009d655c"
        }
      ],
      "purl": "pkg:npm/rollup-plugin-npm@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup-plugin-npm/-/rollup-plugin-npm-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup-plugin-npm@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup-plugin-npm/-/rollup-plugin-npm-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rsvp",
      "version": "3.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "07cb4a5df25add9e826ebc67dcc9fd89db27d84a"
        }
      ],
      "purl": "pkg:npm/rsvp@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rsvp/-/rsvp-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rsvp@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rsvp/-/rsvp-3.2.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.3.3 used instead of 3.2.1"
        },
        {
          "name": "ImportedModules",
          "value": "rsvp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "mocha_test/asyncify.js",
            "line": 155
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "300bc6e0e86374f7ba61068b5b1ecd57fc6532da"
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a295a0de12b6a650c031c40deb0dc40b14568bd2"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.7.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.7.5 used instead of 2.7.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-buffer",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca067ea08431d507722b1de5083f602616ebc234"
        }
      ],
      "purl": "pkg:npm/vinyl-buffer@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-buffer/-/vinyl-buffer-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-buffer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-buffer/-/vinyl-buffer-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "0.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c06b797af085ea00bc527afc8efcf11de2232054"
        }
      ],
      "purl": "pkg:npm/bl@0.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-0.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@0.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-0.9.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ab9c67b29d57209071410e1d7a7a968cd3ad48"
        }
      ],
      "purl": "pkg:npm/through2@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-source-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44cbe5108205279deb0c5653c094a2887938b1ab"
        }
      ],
      "purl": "pkg:npm/vinyl-source-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-source-stream/-/vinyl-source-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-source-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-source-stream/-/vinyl-source-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchify",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee2f2c5c8c37312303f998b818b2b3450eefe648"
        }
      ],
      "purl": "pkg:npm/watchify@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchify/-/watchify-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchify@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchify/-/watchify-3.7.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.9.0 used instead of 3.7.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.9.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77436c2180f991dba6d79ac4268d666973a6c3f6"
        }
      ],
      "purl": "pkg:npm/yargs@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.9.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "perf/benchmark.js",
            "line": 14
          },
          {
            "location": "support/build/compile-module.js",
            "line": 3
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/lodash@4.16.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash-es@4.16.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-runtime@6.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.10.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-cli@6.24.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/glob@7.1.1",
        "pkg:npm/minimatch@3.0.3",
        "pkg:npm/regenerator-runtime@0.10.3"
      ]
    },
    {
      "ref": "pkg:npm/babel-code-frame@6.22.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-messages@6.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-template@6.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-traverse@6.23.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-types@6.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babylon@6.16.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@9.16.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-core@6.24.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.22.0",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.23.0",
        "pkg:npm/babel-template@6.23.0",
        "pkg:npm/babel-traverse@6.23.1",
        "pkg:npm/babel-types@6.23.0",
        "pkg:npm/babylon@6.16.1",
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/globals@9.16.0",
        "pkg:npm/js-tokens@3.0.1",
        "pkg:npm/minimatch@3.0.3",
        "pkg:npm/regenerator-runtime@0.10.3"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-add-module-exports@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-istanbul@2.0.3",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-preset-es2015@6.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-preset-es2017@6.22.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babelify@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/benchmark@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bluebird@3.4.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@3.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cheerio@0.22.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/coveralls@2.11.9",
      "dependsOn": [
        "pkg:npm/qs@5.2.0",
        "pkg:npm/request@2.67.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@9.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/user-home@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint@2.13.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/argparse@1.0.9",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/esprima@2.7.3",
        "pkg:npm/glob@7.1.1",
        "pkg:npm/globals@9.12.0",
        "pkg:npm/js-yaml@3.6.1",
        "pkg:npm/minimatch@3.0.3",
        "pkg:npm/user-home@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@0.26.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gh-pages-deploy@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@1.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bluebird@2.9.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/espree@2.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/taffydb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdoc@3.4.0",
      "dependsOn": [
        "pkg:npm/async@1.4.2",
        "pkg:npm/bluebird@2.9.34",
        "pkg:npm/espree@2.2.5",
        "pkg:npm/taffydb",
        "pkg:npm/underscore@1.8.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash@3.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/karma@1.3.0",
      "dependsOn": [
        "pkg:npm/core-js@2.4.1",
        "pkg:npm/glob@7.1.1",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/minimatch@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/karma-browserify@5.1.0",
      "dependsOn": [
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/minimatch@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/karma-firefox-launcher@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/karma-mocha@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/karma-mocha-reporter@2.2.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/chalk@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json3@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mocha@3.1.2",
      "dependsOn": [
        "pkg:npm/glob@7.0.5",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/minimatch@3.0.3",
        "pkg:npm/supports-color@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/native-promise-only@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/align-text@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/append-transform@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-diff@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-flatten@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-unique@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arrify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-code-frame@6.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-generator@6.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-messages@6.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-runtime@6.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-template@6.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-traverse@6.10.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-types@6.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babylon@6.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/braces@1.8.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caching-transform@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/center-align@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@2.1.0",
      "dependsOn": [
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/code-point-at@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-spawn@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/default-require-extensions@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-indent@3.0.1",
      "dependsOn": [
        "pkg:npm/minimist@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/error-ex@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esutils@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-range@1.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extglob@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filename-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-range@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-cache-dir@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-in@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/foreground-child@1.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-base@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@8.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/handlebars@4.0.5",
      "dependsOn": [
        "pkg:npm/source-map@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/has-ansi@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inflight@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/invariant@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/invert-kv@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-builtin-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-dotfile@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-equal-shallow@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extglob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-finite@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-posix-bracket@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-primitive@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isexe@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@1.0.0-alpha.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-instrument@1.1.0-alpha.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@1.0.0-alpha.3",
      "dependsOn": [
        "pkg:npm/supports-color@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@1.0.0-alpha.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-reports@1.0.0-alpha.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lazy-cache@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.13.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.assign@4.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.keys@4.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.rest@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/longest@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.2.0",
      "dependsOn": [
        "pkg:npm/js-tokens@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/md5-hex@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/md5-o-matic@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/micromatch@2.3.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.omit@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-homedir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-locale@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-glob@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-parse@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkg-conf@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkg-dir@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkg-up@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/preserve@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pseudomap@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randomatic@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.9.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regex-cache@0.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeating@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-main-filename@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-from@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/right-align@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rimraf@2.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-blocking@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slide@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spawn-wrap@1.2.3",
      "dependsOn": [
        "pkg:npm/signal-exit@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/spdx-correct@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-exceptions@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/symbol@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-exclude@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-fast-properties@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@2.7.0",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/write-file-atomic@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@4.7.1",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/window-size@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@2.4.0",
      "dependsOn": [
        "pkg:npm/camelcase@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/nyc@7.0.0",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4",
        "pkg:npm/amdefine@1.0.0",
        "pkg:npm/ansi-regex@2.0.0",
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/append-transform@0.4.0",
        "pkg:npm/arr-diff@2.0.0",
        "pkg:npm/arr-flatten@1.0.1",
        "pkg:npm/array-unique@0.2.1",
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/async@1.5.2",
        "pkg:npm/babel-code-frame@6.11.0",
        "pkg:npm/babel-generator@6.11.0",
        "pkg:npm/babel-messages@6.8.0",
        "pkg:npm/babel-runtime@6.9.2",
        "pkg:npm/babel-template@6.9.0",
        "pkg:npm/babel-traverse@6.10.4",
        "pkg:npm/babel-types@6.11.1",
        "pkg:npm/babylon@6.8.4",
        "pkg:npm/balanced-match@0.4.1",
        "pkg:npm/brace-expansion@1.1.5",
        "pkg:npm/braces@1.8.5",
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/caching-transform@1.0.1",
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/center-align@0.1.3",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cliui@2.1.0",
        "pkg:npm/code-point-at@1.0.0",
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/concat-map@0.0.1",
        "pkg:npm/convert-source-map@1.2.0",
        "pkg:npm/core-js@2.4.0",
        "pkg:npm/cross-spawn@4.0.0",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/default-require-extensions@1.0.0",
        "pkg:npm/detect-indent@3.0.1",
        "pkg:npm/error-ex@1.3.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/expand-brackets@0.1.5",
        "pkg:npm/expand-range@1.8.2",
        "pkg:npm/extglob@0.3.2",
        "pkg:npm/filename-regex@2.0.0",
        "pkg:npm/fill-range@2.2.3",
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/for-in@0.1.5",
        "pkg:npm/for-own@0.1.4",
        "pkg:npm/foreground-child@1.5.3",
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/glob-base@0.3.0",
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/glob@7.0.5",
        "pkg:npm/globals@8.18.0",
        "pkg:npm/graceful-fs@4.1.4",
        "pkg:npm/handlebars@4.0.5",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/has-flag@1.0.0",
        "pkg:npm/hosted-git-info@2.1.5",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/inflight@1.0.5",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/invariant@2.2.1",
        "pkg:npm/invert-kv@1.0.0",
        "pkg:npm/is-arrayish@0.2.1",
        "pkg:npm/is-buffer@1.1.3",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/is-dotfile@1.0.2",
        "pkg:npm/is-equal-shallow@0.1.3",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-finite@1.0.1",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/is-number@2.1.0",
        "pkg:npm/is-posix-bracket@0.1.1",
        "pkg:npm/is-primitive@2.0.0",
        "pkg:npm/is-utf8@0.2.1",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/isexe@1.1.2",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/istanbul-lib-coverage@1.0.0-alpha.4",
        "pkg:npm/istanbul-lib-instrument@1.1.0-alpha.2",
        "pkg:npm/istanbul-lib-report@1.0.0-alpha.3",
        "pkg:npm/istanbul-lib-source-maps@1.0.0-alpha.10",
        "pkg:npm/istanbul-reports@1.0.0-alpha.7",
        "pkg:npm/js-tokens@2.0.0",
        "pkg:npm/kind-of@3.0.3",
        "pkg:npm/lazy-cache@1.0.4",
        "pkg:npm/lcid@1.0.0",
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/lodash.assign@4.0.9",
        "pkg:npm/lodash.keys@4.0.7",
        "pkg:npm/lodash.rest@4.0.3",
        "pkg:npm/lodash@4.13.1",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/loose-envify@1.2.0",
        "pkg:npm/lru-cache@4.0.1",
        "pkg:npm/md5-hex@1.3.0",
        "pkg:npm/md5-o-matic@0.1.1",
        "pkg:npm/micromatch@2.3.10",
        "pkg:npm/minimatch@3.0.2",
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/ms@0.7.1",
        "pkg:npm/normalize-package-data@2.3.5",
        "pkg:npm/normalize-path@2.0.1",
        "pkg:npm/number-is-nan@1.0.0",
        "pkg:npm/object-assign@4.1.0",
        "pkg:npm/object.omit@2.0.0",
        "pkg:npm/once@1.3.3",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/os-homedir@1.0.1",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/parse-glob@3.0.4",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/path-is-absolute@1.0.0",
        "pkg:npm/path-parse@1.0.5",
        "pkg:npm/path-type@1.1.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/pinkie@2.0.4",
        "pkg:npm/pkg-conf@1.1.3",
        "pkg:npm/pkg-dir@1.0.0",
        "pkg:npm/pkg-up@1.0.0",
        "pkg:npm/preserve@0.2.0",
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/randomatic@1.1.5",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/read-pkg@1.1.0",
        "pkg:npm/regenerator-runtime@0.9.5",
        "pkg:npm/regex-cache@0.4.3",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/repeat-string@1.5.4",
        "pkg:npm/repeating@1.1.3",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/resolve-from@2.0.0",
        "pkg:npm/right-align@0.1.3",
        "pkg:npm/rimraf@2.5.3",
        "pkg:npm/semver@5.2.0",
        "pkg:npm/set-blocking@1.0.0",
        "pkg:npm/signal-exit@3.0.0",
        "pkg:npm/slide@1.1.6",
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/spawn-wrap@1.2.3",
        "pkg:npm/spdx-correct@1.0.2",
        "pkg:npm/spdx-exceptions@1.0.4",
        "pkg:npm/spdx-expression-parse@1.0.2",
        "pkg:npm/spdx-license-ids@1.2.1",
        "pkg:npm/string-width@1.0.1",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/strip-bom@2.0.0",
        "pkg:npm/supports-color@2.0.0",
        "pkg:npm/symbol@0.2.3",
        "pkg:npm/test-exclude@1.1.0",
        "pkg:npm/to-fast-properties@1.0.2",
        "pkg:npm/uglify-js@2.7.0",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/validate-npm-package-license@3.0.1",
        "pkg:npm/which@1.2.10",
        "pkg:npm/window-size@0.1.0",
        "pkg:npm/wordwrap@0.0.3",
        "pkg:npm/wrap-ansi@2.0.0",
        "pkg:npm/wrappy@1.0.2",
        "pkg:npm/write-file-atomic@1.1.4",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yallist@2.0.0",
        "pkg:npm/yargs-parser@2.4.0",
        "pkg:npm/yargs@4.7.1"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/recursive-readdir@1.3.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rimraf@2.5.2",
      "dependsOn": [
        "pkg:npm/glob@7.0.3"
      ]
    },
    {
      "ref": "pkg:npm/source-map-support@0.4.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@0.36.3",
      "dependsOn": [
        "pkg:npm/source-map-support@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/rollup-plugin-node-resolve@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup-plugin-npm@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rsvp@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@2.7.4",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/bl@0.9.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.34",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/through2@0.6.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl-buffer@1.0.0",
      "dependsOn": [
        "pkg:npm/bl@0.9.5",
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/through2@0.6.5"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-source-stream@1.1.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/through2@0.6.5"
      ]
    },
    {
      "ref": "pkg:npm/watchify@3.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.9.1",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/async@2.5.0",
      "dependsOn": [
        "pkg:npm/babel-cli@6.24.0",
        "pkg:npm/babel-core@6.24.0",
        "pkg:npm/babel-plugin-add-module-exports@0.2.1",
        "pkg:npm/babel-plugin-istanbul@2.0.3",
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.7.4",
        "pkg:npm/babel-preset-es2015@6.6.0",
        "pkg:npm/babel-preset-es2017@6.22.0",
        "pkg:npm/babelify@7.2.0",
        "pkg:npm/benchmark@2.1.2",
        "pkg:npm/bluebird@3.4.6",
        "pkg:npm/chai@3.5.0",
        "pkg:npm/cheerio@0.22.0",
        "pkg:npm/coveralls@2.11.9",
        "pkg:npm/es6-promise@2.3.0",
        "pkg:npm/eslint@2.13.1",
        "pkg:npm/fs-extra@0.26.7",
        "pkg:npm/gh-pages-deploy@0.4.2",
        "pkg:npm/jsdoc@3.4.0",
        "pkg:npm/karma-browserify@5.1.0",
        "pkg:npm/karma-firefox-launcher@1.0.0",
        "pkg:npm/karma-mocha-reporter@2.2.0",
        "pkg:npm/karma-mocha@1.2.0",
        "pkg:npm/karma@1.3.0",
        "pkg:npm/lodash-es@4.16.6",
        "pkg:npm/lodash@4.16.6",
        "pkg:npm/mocha@3.1.2",
        "pkg:npm/native-promise-only@0.8.1",
        "pkg:npm/nyc@7.0.0",
        "pkg:npm/recursive-readdir@1.3.0",
        "pkg:npm/rimraf@2.5.2",
        "pkg:npm/rollup-plugin-node-resolve@2.0.0",
        "pkg:npm/rollup-plugin-npm@2.0.0",
        "pkg:npm/rollup@0.36.3",
        "pkg:npm/rsvp@3.2.1",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/uglify-js@2.7.4",
        "pkg:npm/vinyl-buffer@1.0.0",
        "pkg:npm/vinyl-source-stream@1.1.0",
        "pkg:npm/watchify@3.7.0",
        "pkg:npm/yargs@3.9.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/async@2.5.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-10T12:21:05Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'async' with version '2.5.0'."
    }
  ]
}