{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:5a8376d4-1cdf-4b7b-91a7-acda7851e50f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-29T20:38:59Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "boom",
      "group": "",
      "version": "0.4.2-tuxcare.1",
      "description": "HTTP-friendly error objects",
      "purl": "pkg:npm/boom@0.4.2-tuxcare.1",
      "bom-ref": "pkg:npm/boom@0.4.2-tuxcare.1",
      "author": "Eran Hammer <eran@hueniverse.com> (http://hueniverse.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "hoek",
      "version": "0.9.1-tuxcare.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c50dfd47e4402704a4ab3db20b199d4a3dd127bbf85a210338d465a6c17f68f219c6ef8b431a1ec35d0616053459c066d3c4d4177f1574323c3a4a798b8f10e"
        }
      ],
      "purl": "pkg:npm/hoek@0.9.1-tuxcare.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/hoek/-/hoek-0.9.1-tuxcare.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.9.1-tuxcare.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/hoek/-/hoek-0.9.1-tuxcare.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "hoek"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/index.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lab",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "183ef3fe5bc1de741db9ebb7edca52927bae4fedd687769e669375f3b5cd9b39f6cdf16c47498365eb7ec292ff95923660b64728073706ce9013adb06848fde9"
        }
      ],
      "purl": "pkg:npm/lab@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/lab/-/lab-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lab@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/lab/-/lab-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78091da0ac54ebf2e42830732e94feb7a15fe44b5f485e30c7559f2623c4115ed634b9c36915e4d28572b2210f9b6eb6ae869a72119ec7052ff785a14a03794d"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/async/-/async-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "blanket",
      "version": "1.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13d4681d77fdf8c647e3699faa0b97c203f45ffc36a12831fc4bf88fc77dbf2cffbe250b1a6c3e08df33d906a2886f0be9505229d406e678db809b7684164bf7"
        }
      ],
      "purl": "pkg:npm/blanket@1.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/blanket/-/blanket-1.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blanket@1.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/blanket/-/blanket-1.1.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16ca96980a5618c18b28a3691edd763cc73900aec169979ed16461d387c2cac993cc77beaeb28e6b630a8ce4619f37e97b8af42677dda879f4da20c0f43aa3d8"
        }
      ],
      "purl": "pkg:npm/acorn@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/acorn/-/acorn-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/acorn/-/acorn-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "falafel",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0ac87ba01a4ded6107199a3dfe27ed0f95c539f4960e64beb42ebddd630b0b0c361847ff8662f0215b958edcd4df87614939c191a17271c6d1a975ad6a1394a"
        }
      ],
      "purl": "pkg:npm/falafel@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/falafel/-/falafel-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/falafel@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/falafel/-/falafel-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreach",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93a180183caa2def4969e6c2b050a8b9d3cf59f8a12aef29ca5617465a8fd49ee6b37f623e84ed9367ef88d82521e404c1d8746d078a274d593f2bb242f2b3c2"
        }
      ],
      "purl": "pkg:npm/foreach@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/foreach/-/foreach-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreach@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/foreach/-/foreach-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f64bedc62f1587fae86b34472887f7e799878ff04f3fcc797ae3877f8dd034836bb25efcb7b1bd2ac68b44fa77b42ed71c1e49d0cd6c1913385a93ba09d0239"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "1.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89322d9a8311f92fa0f20d3153b75bda6aebd8b78b309e98f9827024439449a553ce6eaac9305f8f9afee71f9742195751f567e967c54b8b17a44b4c83a4306b"
        }
      ],
      "purl": "pkg:npm/chai@1.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/chai/-/chai-1.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai@1.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/chai/-/chai-1.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83f81957e1b8efa7279ad608f8aa3d779921c52a024a8a26fc468d9a609fc293af057109d7cab016bc5f3f5fc2b08aa4da7a35b0028ac319dd574b4fed138e15"
        }
      ],
      "purl": "pkg:npm/assertion-error@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assertion-error/-/assertion-error-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/assertion-error/-/assertion-error-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7311bef7bde9971695267e1ddfb2d6b8607cf797079bc57bda5a63db16ff5aa6e8d00560e792b3c32d72d0b35819a3844258c0ec4fcf6bd0f7ffcfcff4d9318"
        }
      ],
      "purl": "pkg:npm/diff@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/diff/-/diff-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/diff/-/diff-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "1.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "948e8cbac313a7d70fd6723671b48ac40596ea64e4b81a860f744b1da4c17d4683085b7227544c704ba75e21ab96c10e6ee390d68aeecda2348bc3ea11bbb5fd"
        }
      ],
      "purl": "pkg:npm/handlebars@1.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/handlebars/-/handlebars-1.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/handlebars/-/handlebars-1.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c2c7475743356d4828363a063f6cef618ccf5c5785d8c74f5354afacdfe1619234fa2e8bec2defa93ccce959ffbac972bf8548b3b36814a13c378c733455a4d"
        }
      ],
      "purl": "pkg:npm/optimist@0.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6d300f74efe578426c55edd6d1bdbe3ff0c69100b2baabd01b89dde774c6276f2a3ca628ac0a678e355a95497a9003729a3f848bb796fbb9de84daca8ff1317"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f62d65b27717f9f81b696f44bf1a0ff22859988e75fd8ed43899d37d611abbdc184ddb51215340efc37c180cba9ddd3a2819426508a7f719fca38f2fd14dc58"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uglify-js/-/uglify-js-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/uglify-js/-/uglify-js-2.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56d0af07d488421937685ea1f8df3911aa8868114801f67d0aef8d2471d5bdcf016c4727bc3705c3ab2a436750ad3e9294ead9ab7b48bf20fdf841aafe526bc9"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b61f0d13b4d90c26121a6c1c08a2328bf581cee53d27e5e36a589ecbae57a5ff30db7ed429c696a98bcb59b375f51d66bebbe41ec9d1a6cf3354d26d3df9172"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b273783b84e48a0ba36698562cdd04fff9d09a6efbf74458684e770dd2fb658c1e7b60fc0c3a3dfc4c9888a51f377ae77965238499ee7a28dadc6f48da2d21de"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a8b644efc5cf93c0e9b921e8a6f159d236f0838c22bd4bc1b7b1c279d19b61b294b16bb8f1e748e485876eb80b408ef7c35304a03b07fcf887fdf4094e121cb"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "complexity-report",
      "version": "0.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "728f8b7bf87cdc24977dd6ac720675962595fdfe19fdb05ad798d604544103948fe8b8bead1b69d3919a4c2fcb6e2fee16c5b2efd4bb56a07dd3ab1285f8b1d4"
        }
      ],
      "purl": "pkg:npm/complexity-report@0.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/complexity-report/-/complexity-report-0.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/complexity-report@0.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/complexity-report/-/complexity-report-0.10.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "check-types",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5401b2680af35ed9f144cc3189dfc821014e3308507d88824d232bd398cf318a20ced5396dcdb713ae87079dee0a341f12d28d618db3477ded18c5e25f2ad38f"
        }
      ],
      "purl": "pkg:npm/check-types@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/check-types/-/check-types-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/check-types@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/check-types/-/check-types-0.6.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef5468776021707dc9864062915a4d774a40f9f5ac980695a2d8ba391dfc4fbe9c840eef137a527ab4b4268af8c03c3eb4eb9e0f6ccb56f14ec391f445c8fbac"
        }
      ],
      "purl": "pkg:npm/commander@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/commander/-/commander-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/commander/-/commander-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "keypress",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74c9ff4f2ff9f1f4dc3da0b2fc65512b14093ce7f96c97010fed5cfbb39488d4e0d7648822b770b9ab25a3c380f13ae3bfdc76f8f3ae92421dbc6b557577e58"
        }
      ],
      "purl": "pkg:npm/keypress@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/keypress/-/keypress-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keypress@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/keypress/-/keypress-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9e5d30a37ccc4b3d75f8bd8345f50a52e657ffd647293f475e66a6914d202205446e4ff7654fed9d38a7ca64fbe800068f56dad63e907caee8fd661078264c"
        }
      ],
      "purl": "pkg:npm/esprima@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/esprima/-/esprima-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://nexus.repo.tuxcare.com/repository/artifacts_els_js/esprima/-/esprima-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/hoek@0.9.1-tuxcare.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/foreach@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/falafel@1.2.0",
      "dependsOn": [
        "pkg:npm/acorn@1.2.2",
        "pkg:npm/foreach@2.0.6",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/xtend@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blanket@1.1.10",
      "dependsOn": [
        "pkg:npm/acorn@1.2.2",
        "pkg:npm/falafel@1.2.0",
        "pkg:npm/foreach@2.0.6",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/assertion-error@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@1.7.2",
      "dependsOn": [
        "pkg:npm/assertion-error@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/diff@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.3.7",
      "dependsOn": [
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.3.6",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@1.0.12",
      "dependsOn": [
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/uglify-js@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/lab@0.1.6",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/blanket@1.1.10",
        "pkg:npm/chai@1.7.2",
        "pkg:npm/diff@1.0.8",
        "pkg:npm/handlebars@1.0.12",
        "pkg:npm/optimist@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/check-types@0.6.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/keypress@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@1.1.1",
      "dependsOn": [
        "pkg:npm/keypress@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/esprima@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/complexity-report@0.10.5",
      "dependsOn": [
        "pkg:npm/check-types@0.6.5",
        "pkg:npm/commander@1.1.1",
        "pkg:npm/esprima@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/boom@0.4.2-tuxcare.1",
      "dependsOn": [
        "pkg:npm/complexity-report@0.10.5",
        "pkg:npm/hoek@0.9.1-tuxcare.2",
        "pkg:npm/lab@0.1.6"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/boom@0.4.2-tuxcare.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-29T20:38:59Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'boom' with version '0.4.2-tuxcare.1'."
    }
  ]
}