{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:87be4885-0f1c-40f1-bfec-651b5eca994f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-09T17:17:17Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "crc",
      "group": "",
      "version": "0.2.0",
      "description": "CRC JavaScript implementation",
      "purl": "pkg:npm/crc@0.2.0",
      "bom-ref": "pkg:npm/crc@0.2.0",
      "author": "Alex Gorbatchev <alex.gorbatchev@gmail.com>",
      "properties": [],
      "type": "application",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/alexgorbatchev/node-crc.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "mocha",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "249a4ca1b171952f6cc6ce94d57237f26a8b773a89087c050c0fbccfa4a12d0edb16d5823e88fb37f448dd22a1790f061538c185cc4017fe7feeecfc783cd267"
        }
      ],
      "purl": "pkg:npm/mocha@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mocha"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha"
        },
        {
          "name": "cdx:npm:bin",
          "value": "_mocha, mocha"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Mocha v1.x is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "commander",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a11178b9e906c95e68b54ac646bbd4513352650ed1f28c27decf29c00307b7a6aefc317aa3b083543a08ee397eb4fcc77494b6b6201b2caa99c0e8f9600e7ec2"
        }
      ],
      "purl": "pkg:npm/commander@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.5.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/commander"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "daf2197faefe80c89c2eef0c72c703d4d3613166e24d2264865072a130351b0e78cce6fff48971ca5606f8aafdcf55f6c194c787500c4a9f9888c8d8b4b91550"
        }
      ],
      "purl": "pkg:npm/debug@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-0.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04e6577a75b8a981679fc1a11f6e0ee317e31790b14f4d6e49839f17f846a5318572cff9d337399e717502d57578f3ffa24e21182f5910dacbb66e638e3d7a18"
        }
      ],
      "purl": "pkg:npm/diff@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27d08783ee831b48d50ef56ae6c75f834383f36b20a893b636ad31d1bb91433ad625c2ada70ee66103e3ae5c79e8b1c18559a621f10ffae463f7bd1c67c60f12"
        }
      ],
      "purl": "pkg:npm/growl@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.5.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/growl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jade",
      "version": "0.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d23921ae3eee6557972acb21d0ca9526a5a1f56c9cc597b2b15ac2e10cdf2a05cb76fa3dab27b1df23e091348360c3f8ee3f9bcc22e6278ed61560d751aca1d3"
        }
      ],
      "purl": "pkg:npm/jade@0.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jade@0.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.20.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jade"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jade"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jade"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ab904d673d6a88cb99c528db8f0bb96b5b1d9136e9fb6b73060875e37301245d8a6206e7a0bd2821c9f81c4d988ff7f0d7a94fe78ce8336737266d30729ae1"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mkdirp"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "should",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b8f7ae7b9b9cefaa13f1c790f4442c884be51a78483610ec4297568b585a6fc54e26b0ef3a513abbc37cca349128a307ae1a07e9efe87c7eea84261450308ba"
        }
      ],
      "purl": "pkg:npm/should@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should/-/should-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/should@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/should/-/should-0.6.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/should"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/commander@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/growl@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jade@0.20.3",
      "dependsOn": [
        "pkg:npm/commander@0.5.1",
        "pkg:npm/mkdirp@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/mocha@1.0.2",
      "dependsOn": [
        "pkg:npm/commander@0.5.1",
        "pkg:npm/debug@0.6.0",
        "pkg:npm/diff@1.0.2",
        "pkg:npm/growl@1.5.1",
        "pkg:npm/jade@0.20.3"
      ]
    },
    {
      "ref": "pkg:npm/should@0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/crc@0.2.0",
      "dependsOn": [
        "pkg:npm/mocha@1.0.2",
        "pkg:npm/should@0.6.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/crc@0.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-09T17:17:17Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'crc' with version '0.2.0'."
    }
  ]
}